Skip to content

Commit 9006b3c

Browse files
brian93512brian93512
committed
chore: handle requested directory scans
1 parent 5a2fc7d commit 9006b3c

8 files changed

Lines changed: 545 additions & 366 deletions

File tree

‎data/reports/helix-pilot.json‎

Lines changed: 119 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,119 @@
1+
{
2+
"tool_id": "helix-pilot",
3+
"version": "2.0.0",
4+
"grade": "B",
5+
"risk_score": 17,
6+
"scan_date": "2026-05-29T18:40:23.715466Z",
7+
"scanner": "tooltrust-scanner/v0.3.12",
8+
"source_url": "https://github.com/tsunamayo7/helix-pilot",
9+
"category": "Scan Request",
10+
"vendor": "tsunamayo7",
11+
"stars": 4,
12+
"license": "MIT",
13+
"language": "Python",
14+
"description": "GUI automation MCP server powered by local Vision LLM (Ollama). Control your Windows desktop from Claude Code, Codex CLI, and other MCP clients.",
15+
"findings": [
16+
{
17+
"id": "AS-002",
18+
"severity": "High",
19+
"title": "Excessive Permission Surface",
20+
"description": "tool declares exec permission",
21+
"recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
22+
"tool_name": "find"
23+
},
24+
{
25+
"id": "AS-011",
26+
"severity": "Low",
27+
"title": "DoS Resilience — Missing Rate Limit / Timeout",
28+
"description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
29+
"recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
30+
"tool_name": "find"
31+
},
32+
{
33+
"id": "AS-002",
34+
"severity": "High",
35+
"title": "Excessive Permission Surface",
36+
"description": "tool declares exec permission",
37+
"recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
38+
"tool_name": "auto"
39+
},
40+
{
41+
"id": "AS-011",
42+
"severity": "Low",
43+
"title": "DoS Resilience — Missing Rate Limit / Timeout",
44+
"description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
45+
"recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
46+
"tool_name": "auto"
47+
},
48+
{
49+
"id": "AS-002",
50+
"severity": "High",
51+
"title": "Excessive Permission Surface",
52+
"description": "tool declares exec permission",
53+
"recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
54+
"tool_name": "browse"
55+
},
56+
{
57+
"id": "AS-011",
58+
"severity": "Low",
59+
"title": "DoS Resilience — Missing Rate Limit / Timeout",
60+
"description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
61+
"recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
62+
"tool_name": "browse"
63+
},
64+
{
65+
"id": "AS-002",
66+
"severity": "Medium",
67+
"title": "Excessive Permission Surface",
68+
"description": "tool declares fs permission",
69+
"recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
70+
"tool_name": "resize_image"
71+
},
72+
{
73+
"id": "AS-002",
74+
"severity": "High",
75+
"title": "Excessive Permission Surface",
76+
"description": "tool declares exec permission",
77+
"recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
78+
"tool_name": "spawn_pilot_agent"
79+
},
80+
{
81+
"id": "AS-011",
82+
"severity": "Low",
83+
"title": "DoS Resilience — Missing Rate Limit / Timeout",
84+
"description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
85+
"recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
86+
"tool_name": "spawn_pilot_agent"
87+
}
88+
],
89+
"summary": {
90+
"critical": 0,
91+
"high": 4,
92+
"medium": 1,
93+
"low": 4,
94+
"info": 0
95+
},
96+
"methodology": "https://github.com/AgentSafe-AI/tooltrust-directory/blob/main/docs/methodology.md",
97+
"tool_names": [
98+
"auto",
99+
"browse",
100+
"click",
101+
"click_screenshot",
102+
"close_pilot_agent",
103+
"describe",
104+
"find",
105+
"hotkey",
106+
"list_pilot_agents",
107+
"list_windows",
108+
"resize_image",
109+
"screenshot",
110+
"scroll",
111+
"send_pilot_agent_input",
112+
"spawn_pilot_agent",
113+
"status",
114+
"type_text",
115+
"verify",
116+
"wait_pilot_agent",
117+
"wait_stable"
118+
]
119+
}

‎data/reports/james-bf0v-imprint-intelligence.json‎

Lines changed: 0 additions & 197 deletions
This file was deleted.

0 commit comments

Comments
 (0)