Manifest
    by Manifold
    Back to Results
    1.16.0

    ai.smithery/Phionx-mcp-hello-server

    Send personalized greetings to anyone. Enable Pirate Mode for swashbuckling salutations. Explore t…

    domain-knowledge›education
    Rank#500
    smitherymcp-registrySpecialized toolLast scanned Oct 24, 2026, 05:58 AMhttps://github.com/Phionx/mcp-hello-server
    Created
    last year
    Last commit
    last year

    Security Findings

    Tool name/behavior mismatch

    MaliciousScanner

    check_equation: Handler uses Python's eval() on user-supplied equation strings (eval(lhs_expr, {}, context) and eval(rhs_expr, {}, context)), enabling arbitrary Python code execution beyond dimensional analysis — not disclosed in the tool description.

    Tools out of server's stated scope3×

    MaliciousScanner

    add_custom_variable: Server is described as a greeting tool, but this tool adds custom physics variables for equation checking — unrelated to sending greetings.

    list_units: Server is described as a greeting tool, but this tool lists physical units and constants for equation checking — unrelated to sending greetings.

    check_equation: Server is described as a greeting/personalized-message tool ('Send personalized greetings to anyone'), but this tool checks physics equation dimensional consistency — completely unrelated to the stated purpose.

    Missing permission declaration

    SuspiciousScanner

    Server declares no permissions across 3 tools

    Few commits

    SuspiciousLineage

    Only 3 commits

    No license file

    SuspiciousLineage

    No license file at the repo root and GitHub's licenseInfo is empty — code's legal status is unclear

    No tagged releases

    SuspiciousLineage

    Repo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions

    Eval/exec with dynamic content

    SuspiciousScanner

    Dynamic code execution: custom_vars[var_name] = eval(unit_expr, {}, {"Q_": Q_, "ureg": ureg})

    Tools

    3 tools exposed by this MCP server

    3 high risk

    add_custom_variable

    Add a custom variable to the context for equation checking. Args: name: Variable name (e.g., 'g', 'A', 'rho') unit: Unit expression (e.g., '9.81*meter/second**2', 'meter**2', 'kilogram/meter**3') Examples: add_custom_variable("g", "9.81*meter/second**2") # Gravitational acceleration add_custom_variable("A", "meter**2") # Area add_custom_variable("rho", "kilogram/meter**3") # Density

    High Risk
    src/hello_server/server.py

    check_equation

    Check if a physics equation is dimensionally consistent. Examples: - "F = m * a" (Newton's second law) - "E = m * c**2" (Einstein's mass-energy equivalence) - "V = I * R" (Ohm's law) - "d = v * t" (distance = velocity * time) - "g = 9.81 * meter/second**2" (custom gravitational acceleration)

    High Risk
    src/hello_server/server.py

    list_units

    List all available physical units and constants for equation checking. Returns a categorized list of symbols with their units and descriptions.

    High Risk
    src/hello_server/server.py

    Versions

    1
    • 1.16.0
      Scanned Oct 24, 2026, 05:58 AMHigh