code-security-scan
shallowai.intuitek.the-stall/the-stall · Verify this server
PAID MCP TOOL — $2.00 USDC per successful call via native x402. Discovery is free. Source-code security scan of a public GitHub repo. Runs semgrep SAST (p/security-audit rules: CWE coverage for injection, XSS, SQLi, path traversal, SSRF, auth bypass, deserialization, race conditions) + gitleaks secret detection (API keys, credentials, tokens). Returns structured findings with file/line/CWE/severity and any exposed secrets. authorized=true required — caller certifies ownership or written permission for the target repo. Typical execution: 20–90s depending on repo size. Powered by T3MP3ST arsenal.
1 trials · measured 8 days ago
code-security-scan scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against ai.intuitek.the-stall/the-stall, measured 25 Aug 2026 under methodology v0.2.0. Every measured component scored 100.
Component breakdown
| Component | Weight | Value |
|---|---|---|
| Reliability | 35% | not applicable |
| Schema integrity | 25% | 100.0 |
| Failure behaviour | 15% | not applicable |
| Latency | 15% | not applicable |
| Concurrency | 10% | not applicable |
Tool details
- Transport
- remote
- Credential class
- self-provisionable
- Category
- Communication
- Input schema
- not declared
- Output schema
- not declared
- Side-effect classification
- unclassified
Score history
| Day | Score | Tier | Methodology |
|---|---|---|---|
| 2026-08-25 | 100.0 | shallow | v0.2.0 |
Probe evidence
| Probe | Outcomes |
|---|---|
| schema_integrity | pass: 1 |
Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.
Embed this score
Available for every tool, scored or not — not a verification perk. Always links back to this page.
[](https://vouch.tools/tools/890d7ca2-22cb-4acf-ae37-2a4a4962b4c6)