mrseanchow/cowsay-mcp

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    209:     // Get configuration from environment variables
    210:     const serverToken = process.env.SERVER_TOKEN;
>>> 211:     const caseSensitive = process.env.CASE_SENSITIVE === 'true';
    212: 
    213:     // Create server with configuration

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    1: .smithery
    2: node_modules
>>> 3: .env
    4: dist
    5: package-lock.json

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    208: async function main() {
    209:     // Get configuration from environment variables
>>> 210:     const serverToken = process.env.SERVER_TOKEN;
    211:     const caseSensitive = process.env.CASE_SENSITIVE === 'true';
    212: 

Node.js child process spawning

Detected by automated pattern matching (rule SC-005) with medium confidence. May be a false positive.

    13: import cowsay from 'cowsay';
    14: import { COWSAY, COWTHINK, LIST_COWS, GET_VERSION } from './tools.js';
>>> 15: import { exec } from 'child_process';
    16: import { promisify } from 'util';
    17: const execAsync = promisify(exec);

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��bu�^I��z�q�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: J�b�'���ӭ�즊�

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��bu�^I��z�q�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��bu�^I��z�q�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��bu�^I��z�q�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��bu�^I��z�q�,

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.