ai.imboard/dossier

B
7.5

MCP server for dossier automation standard - enables LLMs to discover, verify, and execute dossiers

Installation

Install from source

git clone https://github.com/imboard-ai/ai-dossier
cd ai-imboard-dossier
npm install
npm start

Security Report

Score Breakdown

Description10
Permissions10
Behavior5
Stability--

Findings (5)

medium
vague-description

Unclear Server Purpose and Capabilities

The description uses abstract terminology ('dossier automation standard', 'discover, verify, and execute dossiers') without explaining what concrete operations the server performs. It's unclear what 'dossiers' are in this context and what 'execution' entails.

medium
excessive-scope

Broad Capability Claims Without Definition

The server claims to enable 'discovery', 'verification', and 'execution' of unspecified 'dossiers'. Without tool definitions available, it's impossible to assess whether these capabilities are appropriately scoped or could enable unintended access/actions.

low
info

Unknown Transport Type

The transport mechanism is listed as 'unknown', making it impossible to assess exposure level (local stdio vs. remote HTTP endpoint).

low
info

No Tools Currently Exposed

The server reports 0 tools and no resources. This could indicate the server is not yet initialized, or tools are dynamically loaded. Cannot assess risk without tool definitions.

info
vague-description

Semantic Analysis Summary

This server has a legitimate GitHub repository, which is a positive trust signal, but the vague description and unavailable tool definitions prevent proper security assessment. The abstract language around 'dossier execution' raises concerns about scope and intended capabilities. The lack of visible tools makes it impossible to evaluate actual risks, but the broad claims warrant caution until tool definitions can be reviewed.

Last scanned 1mo ago

Details

Version
1.0.4
Transport
Unknown
Capabilities