Xpack Mcp Marketplace

xpack-ai/XPack-MCP-MarketplaceApache-2.0⭐ 159🔧 7 tools

F1.8SpiderScore (registry)

⚠ Hard constraint applied: critical vulnerability

Decision

Not Recommended

Confidence

90%

Xpack Mcp Marketplace is not recommended — low score (1.75/10) with 4 critical issues.

Recommended Actions

high
Run In Container
4 critical vulnerabilities require isolation
high
Limit Permissions
Restrict tool access to minimum required scope

Do Not

✗running in production without container isolation
✗exposing this tool to untrusted input
✗using for security-sensitive tasks

Risk Flags (4)

critical
unsafe_deserialization
Unsafe deserialization -- untrusted data may execute arbitrary code
high
token_leakage×16
Secret or token may be leaked through error messages, logs, or return values
high
hardcoded_credential
Hardcoded credential -- secret value embedded in source code
medium
timing_attack_comparison×2
Secret compared with == operator -- timing side-channel may leak value length

How This Was Decided

negativew=0.5Overall quality score = 1.75/10 (grade F)
negativew=0.84 critical security issue(s) detected
negativew=0.5104 high-severity issue(s) detected
negativew=0.3Tool description clarity score = 1.4/10

Source: SpiderRating automated security scanUpdated: 2026-03-22Protocol: v1.1

Description Quality

Composite: 1.4 / 10

3-Layer Breakdown

Description (38%)

1.4

Security (34%)

5.4

Metadata (28%)

8.3

Description Dimensions

Intent Clarity

0.0

Permission Scope

0.0

Side Effects

2.0

Capability Disclosure

4.0

Operational Boundaries

1.2

Security Analysis

5.4

Score

Critical

104

High

Medium

Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

4 CRITICAL104 HIGH5 MEDIUM

Metadata Health

Provenance (40%)

10.0

Maintenance (35%)

8.0

Popularity (25%)

6.2

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/xpack-ai__XPack-MCP-Marketplace.svg)](https://spiderrating.com/servers/xpack-ai/XPack-MCP-Marketplace)

🛡️