github.com / suthio

suthio/redash-mcp

TypeScript·64 files·commit a30093b·scanned 12h ago·cached ✓

4/100

SAFE

No malicious patterns found. Repo signals are consistent with a legitimate project.

verdict accurate?

CLI tool detected

threat-state: safelive

FINDINGS ░▒▓

infoAuthor has no other public repositoriesGitHub user "github-actions[bot]" has no other public repositories, common for burner accounts used in scams.+2

Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.

29 files scanned @ a30093b | 10/30/2026 | heuristic scan — always review manually

risk by category

code execution0

network & exfiltration0

file system access0

obfuscation0

supply chain2

owasp / injection0

telemetry

files 29/64rules hit 1engine v10commit a30093b

github

suthio/redash-mcp

TypeScript

107

601d

64 files

29 scanned(45%)

a30093b

network indicators░▒▓

Hosts this code names or would connect to. 3 found, decoded and call-site destinations first. Informational, not scored.

https://demo.redash.iourlplaywright.config.ts:4
https://your-redash-instance.comurlfrom .envtest only.env.example:3
redash.schema.pagedomainsrc/redashClient.ts:890

architecture░▒▓

entry (1) flagged (0) pkg (40)

67 nodes · 104 edgesscroll to zoom · click node to jump to finding