GenerateAgents

Health score

38 out of 100

Does someone look after this repository? It does not say the code is good or safe. Worked out from GitHub signals checked 7 Nov 2026. How it is worked out

Security check static checks

37 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked 24 Oct 2026 by edna-skill-static-v1 main@b627b75a7303. What it checks

• Critical AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (affects anyio 4.12.1, pinned in uv.lock).
• Critical certifi bundles emSign root CAs with compromised intermediate CA keys (affects certifi 2026.1.4, pinned in uv.lock).
• Critical LiteLLM: Authentication Bypass via Host Header Injection (affects litellm 1.81.13, pinned in uv.lock).
• Critical LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint (affects litellm 1.81.13, pinned in uv.lock).
• Critical LiteLLM: Authentication bypass via OIDC userinfo cache key collision (affects litellm 1.81.13, pinned in uv.lock).
• High aiohttp: Multiple instances of excessive or unbounded memory/CPU use (affects aiohttp 3.13.3, pinned in uv.lock).
• High aiohttp server lacks an initial request/header timeout (affects aiohttp 3.13.3, pinned in uv.lock).
• High AIOHTTP: File descriptor exhaustion in multipart requests (affects aiohttp 3.13.3, pinned in uv.lock).
• High AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) (affects aiohttp 3.13.3, pinned in uv.lock).
• High filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files (affects filelock 3.24.3, pinned in uv.lock).
• High fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution (affects fsspec 2026.2.0, pinned in uv.lock).
• High json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS (affects json-repair 0.58.0, pinned in uv.lock).
• High LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM: Password hash exposure and pass-the-hash authentication bypass (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM: Authenticated command execution via MCP stdio test endpoints (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM allows a user to modify their own user_role via the /user/update endpoint (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM has a sandbox escape in custom-code guardrail (affects litellm 1.81.13, pinned in uv.lock).
• High LiteLLM: Server-Side Template Injection in /prompts/test endpoint (affects litellm 1.81.13, pinned in uv.lock).
• High Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup (affects mako 1.3.10, pinned in uv.lock).
• High Mako: Path traversal via double-slash URI prefix in TemplateLookup (affects mako 1.3.10, pinned in uv.lock).
• High Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists (affects soupsieve 2.8.3, pinned in uv.lock).
• High Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser (affects soupsieve 2.8.3, pinned in uv.lock).
• High urllib3: HTTPS proxy TLS configuration may be ignored or overridden (affects urllib3 2.6.3, pinned in uv.lock).
• High urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API (affects urllib3 2.6.3, pinned in uv.lock).
• High urllib3: Sensitive headers forwarded across origins in proxied low-level redirects (affects urllib3 2.6.3, pinned in uv.lock).
• High urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory (affects urllib3 2.6.3, pinned in uv.lock).
• Medium aiohttp: HTTP/1 Pipelined Requests Queue Without Limit (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP: Connector pool exhaustion via Max-Age overflow (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP accepts duplicate Host headers (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP: Absolute-form request targets can spoof Request.scheme (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP is vulnerable to cross-origin redirect with per-request cookies (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP is Vulnerable to Deserialization of Untrusted Data (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP has a Multipart Header Size Bypass (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP: HTTP request smuggling via WebSocket upgrade (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AIOHTTP: Pure-Python parser request smuggling (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium aiohttp: Incomplete websocket frame payloads bypass memory limits (affects aiohttp 3.13.3, pinned in uv.lock).
• Medium AnyIO process-pool workers can block indefinitely on undrained stderr (affects anyio 4.12.1, pinned in uv.lock).
• Medium DiskCache has unsafe pickle deserialization (affects diskcache 5.6.3, pinned in uv.lock).
• Medium Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix (affects idna 3.11, pinned in uv.lock).
• Medium LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters (affects litellm 1.81.13, pinned in uv.lock).
• Medium LiteLLM: MCP Proxy Has Improper Authentication (affects litellm 1.81.13, pinned in uv.lock).
• Medium LiteLLM: Arbitrary file write via path traversal in Skills archive extraction (affects litellm 1.81.13, pinned in uv.lock).
• Medium LiteLLM Proxy has server-side request forgery via the `user_config` request parameter (affects litellm 1.81.13, pinned in uv.lock).
• Medium LiteLLM: SSO Debug Flow Has Improper Authentication (affects litellm 1.81.13, pinned in uv.lock).
• Medium Mako: Path traversal via drive-letter URI on Windows in TemplateLookup (affects mako 1.3.10, pinned in uv.lock).
• Medium Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction (affects multidict 6.7.1, pinned in uv.lock).
• Medium pytest has vulnerable tmpdir handling (affects pytest 9.0.2, pinned in uv.lock).
• Medium python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback (affects python-dotenv 1.2.1, pinned in uv.lock).
• Medium Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function (affects requests 2.32.5, pinned in uv.lock).
• Medium Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns (affects soupsieve 2.8.3, pinned in uv.lock).
• Medium Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors) (affects soupsieve 2.8.3, pinned in uv.lock).
• Medium urllib3: Chunked Deflate streaming can enter an infinite loop (affects urllib3 2.6.3, pinned in uv.lock).
• Low aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP has CRLF injection through multipart part content type header construction (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP: Secure attribute not enforced for shared cookie (affects aiohttp 3.13.3, pinned in uv.lock).
• Low aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect (affects aiohttp 3.13.3, pinned in uv.lock).
• Low aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector (affects aiohttp 3.13.3, pinned in uv.lock).
• Low aiohttp: CRLF injection in multipart headers (affects aiohttp 3.13.3, pinned in uv.lock).
• Low AIOHTTP has HTTP response splitting via \r in reason phrase (affects aiohttp 3.13.3, pinned in uv.lock).
• Low filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break (affects filelock 3.24.3, pinned in uv.lock).
• Low filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database (affects filelock 3.24.3, pinned in uv.lock).
• Low LiteLLM: Local file read via request-supplied OIDC file references (affects litellm 1.81.13, pinned in uv.lock).
• Low LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks (affects litellm 1.81.13, pinned in uv.lock).
• Low BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader (affects litellm 1.81.13, pinned in uv.lock).
• Low BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure (affects litellm 1.81.13, pinned in uv.lock).
• Low LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration (affects litellm 1.81.13, pinned in uv.lock).
• Low BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints (affects litellm 1.81.13, pinned in uv.lock).
• Low LiteLLM: M2M JWT Handler Has Improper Authorization (affects litellm 1.81.13, pinned in uv.lock).
• Low BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens (affects litellm 1.81.13, pinned in uv.lock).
• Low Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching (affects pygments 2.19.2, pinned in uv.lock).
• Low Downloads code and runs it straight away (a well-known installer), host astral.sh: README.md, line 19.