Trust Engine/MCP Server

dcostenco/prism-coder

Persistent memory + local AI for coding agents. 1.7B–32B open-weight LLM fleet, cross-session Mind Palace, cognitive routing, L3 grounding verifier, multi-agent Hivemind. Works with Claude Code, Cursor, VS Code. Offline-first, HIPAA-ready. Free tier included.

153 starsTypeScriptAGPL-3.0agent-memorymcpmcp-servermodel-context-protocol
REVIEWED76/100

Scanned 2026-07-11 · deepseek v1

Dimension breakdown

Security

65/100

8 findings

Quality

78/100

No findings

License

70/100

No findings

Completeness

95/100

No findings

Findings (8)

HIGH: 3MEDIUM: 3LOW: 2
  • HIGHsecurityUnsafe sandbox dependency: quickjs-emscripten
  • HIGHsecurityPotential SQL injection via Supabase client
  • HIGHsecurityHTML parsing with cheerio/jsdom may lead to XSS/SSRF
  • MEDIUMsecurityCloud API keys may be exposed in environment
  • MEDIUMsecurityUnvalidated file operations in CLI tools

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Trust badge — flat styleTrust badge — for-the-badge style

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/dcostenco/prism-coder.svg)](https://archimedes.market/r/dcostenco/prism-coder)

HTML

<a href="https://archimedes.market/r/dcostenco/prism-coder"><img src="https://archimedes.market/api/badge/dcostenco/prism-coder.svg" alt="Archimedes Trust Verified"/></a>

More from dcostenco

All dcostenco reports

Similar MCP Server repos

Browse all

This report is generated automatically from public code and may be wrong. Maintainer? Request a re-scan or removal.