ICUICU
critical

ai.smithery/mrugankpednekar-mcp-optimizer

v1.16.0

Optimize crew and workforce schedules, resource allocation, and routing with linear and mixed-inte…

MCP RegistrysmitheryFirst seen Feb 24, 2026Source

19

Total

1

Critical

5

High

13

Medium

Findings

unknown
criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    6: # Environments
    7: .venv/
>>> 8: .env
    9: venv/
    10: 
Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: r�ߊ•��{�%j�^

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ������� i�'�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ������� i�'�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ������� i�'�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ������� i�'�*'

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    8:       ],
    9:       "env": {
>>> 10:         "PYTHONPATH": "/Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer/src"
    11:       }
    12:     }
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    30:       ],
    31:       "env": {
>>> 32:         "PYTHONPATH": "/Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer/src"
    33:       }
    34:     }
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    39: **Important**: 
    40: - Update the `PYTHONPATH` to point to your actual project path
>>> 41: - Make sure `python` points to the Python with the virtual environment activated, or use the full path to your venv's Python: `/Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer/.venv/bin/python`
    42: 
    43: ### Step 3: Restart Claude Desktop
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    68: 
    69: ```bash
>>> 70: cd /Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer
    71: source .venv/bin/activate
    72: python -m crew_optimizer.server
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    171: 
    172: ```bash
>>> 173: cd /Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer
    174: source .venv/bin/activate
    175: python -c "from crew_optimizer.server import app; print('Server loaded successfully!')"
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    5: ### Step 1: Test the Server
    6: ```bash
>>> 7: cd /Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer
    8: source .venv/bin/activate
    9: python test_mcp.py
Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    53: ### Start the HTTP Server:
    54: ```bash
>>> 55: cd /Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer
    56: source .venv/bin/activate
    57: MCP_TRANSPORT=http python -m crew_optimizer.server
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (5.1 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumOB-001ObfuscationMedium ConfidenceLine 0

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    2:   "mcpServers": {
    3:     "crew-optimizer": {
>>> 4:       "command": "/Users/mrugankpednekar/Documents/Optimization/project/mcp-optimizer/.venv/bin/python",
    5:       "args": [
    6:         "-m",
Report false positive

Scan History

DateRiskFindings
Feb 26, 2026critical19
Feb 24, 2026critical19