critical
@abhiz123/todoist-mcp-server
v0.1.0MCP server for Todoist API integration
3
Total
1
Critical
2
High
0
Medium
Findings
unknowncriticalDE-002Data ExfiltrationHigh ConfidenceLine 0
Environment file access
Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.
128: });
129: // Check for API token
>>> 130: const TODOIST_API_TOKEN = process.env.TODOIST_API_TOKEN;
131: if (!TODOIST_API_TOKEN) {
132: console.error("Error: TODOIST_API_TOKEN environment variable is required");Report false positivehighDO-BASunknownMedium ConfidenceLine 0
Decoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positivehighDO-BASunknownMedium ConfidenceLine 0
Decoded base64 content: J�b�'���ӭ�즊�
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveScan History
| Date | Risk | Findings | Files | Duration |
|---|---|---|---|---|
| Feb 27, 2026 | critical | 3 | 6 | 0.00s |
| Feb 25, 2026 | critical | 3 | 6 | 0.00s |
| Feb 23, 2026 | critical | 3 | 6 | 0.00s |
| Feb 22, 2026 | critical | 3 | 6 | 0.00s |