Skip to content

Latest commit

 

History

History
101 lines (64 loc) · 2.73 KB

File metadata and controls

101 lines (64 loc) · 2.73 KB

🟡 data-transform-agent-data-transform

Convert data between over 40 formats including JSON, CSV, Excel, and PDF. Restructure complex schemas into custom layouts to ensure seamless data integration. Simplify information processing by automating transformations between structured and unstructured file types.

Field Value
Grade B
Risk Score 12
Version smithery
Vendor Smithery
Source data-transform-agent-data-transform
Scan Date 2026-05-04
Scanner tooltrust-scanner/v0.3.9

Findings Summary

Severity Count
Critical 0
High 0
Medium 1
Low 2
Info 3

Detailed Findings

AS-014 — DEPENDENCY_INVENTORY_UNAVAILABLE

Severity: Info

Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

Recommendation: Review and remediate the identified issue.


🟡 🔑 AS-002 — Excessive Permission Surface

Severity: Medium

Description: tool declares fs permission

Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.


🔵 🔑 AS-002 — Excessive Permission Surface

Severity: Low

Description: tool declares http permission

Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.


🔵 ⚡ AS-011 — DoS Resilience — Missing Rate Limit / Timeout

Severity: Low

Description: tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

Recommendation: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.


AS-014 — DEPENDENCY_INVENTORY_UNAVAILABLE

Severity: Info

Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

Recommendation: Review and remediate the identified issue.


AS-014 — DEPENDENCY_INVENTORY_UNAVAILABLE

Severity: Info

Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

Recommendation: Review and remediate the identified issue.


Scored using ToolTrust methodology · Raw JSON report