Star Seeker MCP

Detected

• Talks to external services1 places

  Makes outbound requests. The hosts are listed so you can see where data goes.

  api.github.com

• Loads code at runtime1 places

  Uses eval, dynamic imports or encoded payloads, which static review cannot fully follow.

• Accesses credential files3 places

  References SSH keys, cloud credential files or token stores.

• Reads local configuration files4 places

  Loads a .env, .npmrc or config file. Normal for a server that needs an API key.

Not detected: reads environment variables in bulk, sends conversation content outward, runs shell commands, reads or writes other agents' configuration, uses elevated privileges, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

6 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.