Programmatic Tool Calling Ai Sdk

cameronking4/programmatic-tool-calling-ai-sdk⭐ 15🔧 5 tools

F1.6SpiderScore (registry)

⚠ Hard constraint applied: critical vulnerability

Decision

Not Recommended

Confidence

90%

Programmatic Tool Calling Ai Sdk is not recommended — low score (1.65/10) with 2 critical issues.

Recommended Actions

high
Run In Container
2 critical vulnerabilities require isolation
high
Limit Permissions
Restrict tool access to minimum required scope

Do Not

✗running in production without container isolation
✗using for security-sensitive tasks

Risk Flags (4)

critical
ts_unsafe_eval×2
Dynamic code execution via new Function() â€” user input may run arbitrary code
high
ts_token_leakage×2
Secret or token may be leaked through error messages, logs, or return values
high
prototype_pollution×2
Potential prototype pollution -- user-controlled keys may modify Object.prototype
medium
ts_input_reflection×4
User input reflected directly in tool output -- may enable prompt injection via reflection

How This Was Decided

negativew=0.5Overall quality score = 1.65/10 (grade F)
negativew=0.82 critical security issue(s) detected
negativew=0.54 high-severity issue(s) detected
negativew=0.3Tool description clarity score = 1.1/10

Source: SpiderRating automated security scanUpdated: 2026-03-22Protocol: v1.1

Description Quality

Composite: 1.1 / 10

3-Layer Breakdown

Description (38%)

1.1

Security (34%)

5.4

Metadata (28%)

3.9

Description Dimensions

Intent Clarity

0.0

Permission Scope

0.0

Side Effects

2.0

Capability Disclosure

2.9

Operational Boundaries

1.0

Security Analysis

5.4

Score

Critical

High

Medium

Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

2 CRITICAL4 HIGH4 MEDIUM

Metadata Health

Provenance (40%)

6.0

Maintenance (35%)

2.0

Popularity (25%)

3.3

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/cameronking4__programmatic-tool-calling-ai-sdk.svg)](https://spiderrating.com/servers/cameronking4/programmatic-tool-calling-ai-sdk)

🛡️