Cesium Mcp
gaopengbin/cesium-mcp⭐ 22🔧 20 tools
F1.8SpiderScore (registry)
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%
Cesium Mcp is not recommended — low score (1.78/10) with 1 critical issues.
Recommended Actions
- highRun In Container1 critical vulnerabilities require isolation
- highLimit PermissionsRestrict tool access to minimum required scope
Do Not
- ✗running in production without container isolation
- ✗using for security-sensitive tasks
Risk Flags (3)
- criticalts_unsafe_evalDynamic code execution via new Function() — user input may run arbitrary code
- highprototype_pollution×11Potential prototype pollution -- user-controlled keys may modify Object.prototype
- mediumtiming_attack_comparisonSecret compared with == operator -- timing side-channel may leak value length
How This Was Decided
- negativew=0.5Overall quality score = 1.78/10 (grade F)
- negativew=0.81 critical security issue(s) detected
- negativew=0.511 high-severity issue(s) detected
- negativew=0.3Tool description clarity score = 1.5/10
Source: SpiderRating automated security scanUpdated: 2026-03-21Protocol: v1.1
Description Quality
Composite: 1.5 / 10
3-Layer Breakdown
Description (38%)
1.5
Security (34%)
6.2
Metadata (28%)
2.0
Description Dimensions
Intent Clarity
0.7
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
3.8
Operational Boundaries
1.6
Category Ranking: Location & Travel
#21 of 21 · Top 100%Overall#211.8 (avg 5.3)
Security#216.2 (avg 8.8)
Description#191.5 (avg 2.7)
Metadata#202.0 (avg 5.1)
Why #21 in Location & Travel?
Top 100% of 21 toolsSecurity#216.2avg 8.8
Description#191.5avg 2.7
Metadata#202.0avg 5.1
How to reach #20? Need +2.8 overall to pass Bamwor Mcp Server (4.6). Biggest opportunity: Metadata is 3.1 below category average.
Top action: Fix 11 high-severity security issue(s) (+4.8)
Security Analysis
6.2
Score
1
Critical
11
High
1
Medium
0
Low
Findings Redacted
Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.
1 CRITICAL11 HIGH1 MEDIUM
Metadata Health
Provenance (40%)
5.0
Maintenance (35%)
0.0
Popularity (25%)
0.0
Badge
Add this badge to your README:
[](https://spiderrating.com/servers/gaopengbin/cesium-mcp)🛡️
Protect Your Agents
Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.
Get Free API Key →📊
Monitor All Your Servers
Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.
Start Free Trial →⭐
Scan Locally (Open Source)
Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.
Star on GitHub →