Skip to content

Add MseeP.ai badge to README #5

New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Merged
merged 1 commit into from
May 3, 2025
Merged

Conversation

lwsinclair
Copy link
Contributor

Hi there,

This pull request shares a security update on markdown-downloader.

We also have an entry for markdown-downloader in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of markdown-downloader.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/dazeb-markdown-downloader.

Yours Sincerely,

Lawrence W. Sinclair
CEO/SkyDeck AI
Founder of MseeP.ai
MCP servers you can trust


MSEEP Badge

Here are our latest evaluation results of markdown-downloader

Security Scan Results

Security Score: 58/100

Risk Level: high

Scan Date: 2025-04-25

Score starts at 100, deducts points for security issues, and adds points for security best practices

Detected Vulnerabilities

Medium Severity

  • axios
    • [{'source': 1103618, 'name': 'axios', 'dependency': 'axios', 'title': 'axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL', 'url': 'https://github.com/advisories/GHSA-jr5f-v2jv-69x6', 'severity': 'high', 'cwe': ['CWE-918'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '>=1.0.0 <1.8.2'}]
    • Fixed in version: unknown

Security Findings

Medium Severity Issues

  • semgrep: Potential path traversal in fs module. Ensure proper path validation.

    • Location: /root/security_validator_tmp/markdown-downloader/src/index.ts
    • Line: 24
  • semgrep: Potential path traversal in fs module. Ensure proper path validation.

    • Location: /root/security_validator_tmp/markdown-downloader/src/index.ts
    • Line: 25
  • ... and 11 more medium severity issues

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.

@dazeb dazeb merged commit dba155c into dazeb:main May 3, 2025
@dazeb
Copy link
Owner

dazeb commented May 3, 2025

apologies for late merge mate thanks for the pr

@lwsinclair
Copy link
Contributor Author

Thanks.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants