AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
This report summarizes scanner evidence for mrexodia/ida-pro-mcp, a Python project with 12,645 GitHub stars. SynthScan examined 41,206 lines of code across 153 source files, recording 1360 pattern matches distributed across 12 syntactic categories. The legacy adjusted pattern signal is 51.2 (High pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 783 finding(s).
Are imports declared and package/API names verified? 89 finding(s).
Are wrappers, guards, and repeated structures necessary? 1178 finding(s).
Which changes need focused human review? 1360 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1360 distinct pattern matches across 12 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/test_output_schema.py | 23 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_output_schema.py | 25 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_output_schema.py | 40 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/test_output_schema.py | 42 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 29 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 172 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 174 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/_mcp_spec_support.py | 187 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | tests/_mcp_spec_support.py | 189 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 275 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | tests/_mcp_spec_support.py | 277 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | scripts/stress_search_cancellation.py | 58 | # ─── Headless idalib-mcp lifecycle ───────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/stress_search_cancellation.py | 177 | # ─── Low-level RPC ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/stress_search_cancellation.py | 232 | # ─── Reporting helpers ───────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/stress_search_cancellation.py | 243 | # ─── Phases ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | scripts/stress_search_cancellation.py | 447 | # ─── Main ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 249 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 251 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 439 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 441 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 503 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 505 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 1213 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/idalib_supervisor.py | 1215 | # ------------------------------------------------------------------ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/sync.py | 15 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/sync.py | 17 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 556 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 558 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_types.py | 153 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_types.py | 155 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_types.py | 331 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_types.py | 333 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/compat.py | 317 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/compat.py | 319 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 25 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 27 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 92 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 94 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 105 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 107 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 155 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 157 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 174 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 176 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 209 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 211 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 234 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 236 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 289 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/compat.py | 291 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_python.py | 28 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_python.py | 30 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_python.py | 108 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_python.py | 110 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_modify.py | 1038 | # ============================================================================ | COMMENT |
| MEDIUM⚡ | src/ida_pro_mcp/ida_mcp/api_modify.py | 1040 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_modify.py | 109 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_modify.py | 111 | # ============================================================================ | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_sigmaker.py | 22 | # --------------------------------------------------------------------------- | COMMENT |
| 153 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | devdocs/test-framework.md | 376 | def test_functions_are_decompilable(): | CODE |
| LOW | devdocs/test-framework.md | 569 | def test_int_convert_invalid_text(): | CODE |
| LOW | devdocs/test-framework.md | 639 | def test_decompile_invalid_address(): | CODE |
| LOW | devdocs/test-framework.md | 649 | def test_lookup_funcs_wildcard(): | CODE |
| LOW | devdocs/test-framework.md | 675 | def test_crackme_specific_edge_case(): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 36 | def test_successful_call_response_has_valid_envelope(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 43 | def test_id_is_echoed_as_integer(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 47 | def test_id_is_echoed_as_string(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 51 | def test_id_is_echoed_as_null(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 59 | def test_unknown_method_returns_method_not_found_error(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 66 | def test_error_message_is_non_empty_string(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 71 | def test_error_code_is_in_jsonrpc_range(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 77 | def test_success_response_has_result_and_no_error(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 83 | def test_tools_call_on_known_tool_returns_result(self): | CODE |
| LOW⚡ | tests/test_mcp_spec_envelope.py | 90 | def test_tools_call_on_unknown_tool_returns_is_error_true(self): | CODE |
| LOW | tests/test_mcp_spec_envelope.py | 109 | def test_notifications_initialized_returns_no_body(self): | CODE |
| LOW | tests/test_mcp_spec_envelope.py | 116 | def test_notifications_cancelled_returns_no_body(self): | CODE |
| LOW | tests/test_mcp_spec_envelope.py | 161 | def test_invalid_json_returns_parse_error_envelope(self): | CODE |
| LOW | tests/test_output_schema.py | 106 | def test_nested_anyof_objects(self): | CODE |
| LOW | tests/test_output_schema.py | 115 | def test_nested_anyof_with_non_object(self): | CODE |
| LOW | tests/test_output_schema.py | 139 | def test_union_of_typed_dicts_not_wrapped(self): | CODE |
| LOW | tests/test_output_schema.py | 153 | def test_single_typed_dict_not_wrapped(self): | CODE |
| LOW | tests/test_output_schema.py | 165 | def test_primitive_return_is_wrapped(self): | CODE |
| LOW | tests/test_output_schema.py | 177 | def test_list_return_is_wrapped(self): | CODE |
| LOW | tests/test_output_schema.py | 188 | def test_union_with_non_object_is_wrapped(self): | CODE |
| LOW | tests/test_output_schema.py | 213 | def test_union_typed_dict_json_variant(self): | CODE |
| LOW | tests/test_output_schema.py | 232 | def test_union_typed_dict_header_variant(self): | CODE |
| LOW | tests/test_output_schema.py | 251 | def test_union_typed_dict_prototypes_variant(self): | CODE |
| LOW | tests/test_output_schema.py | 270 | def test_primitive_return_wrapped_consistently(self): | CODE |
| LOW | tests/test_output_schema.py | 288 | def test_single_typed_dict_not_wrapped(self): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 576 | def test_open_session_forwards_idle_ttl_sec(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 585 | def test_open_session_defaults_idle_ttl_sec_to_baseline(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 594 | def test_open_session_skips_warmup_when_flags_disabled(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 621 | def test_tool_error_result_omits_structured_content(): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 627 | def test_open_session_reuses_schema_worker(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 637 | def test_resolve_session_only_accepts_session_id(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 864 | def test_probe_reports_live_but_silent_worker_as_busy(monkeypatch): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 873 | def test_probe_reports_exited_worker_as_dead(monkeypatch): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 882 | def test_resolve_session_keeps_busy_worker(monkeypatch): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1037 | def test_close_session_unknown_session_raises(): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1047 | def test_close_session_requires_database(): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1057 | def test_close_session_detaches_adopted_worker_without_killing(tmp_path): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1143 | def test_idb_close_tool_returns_error_for_unknown_session(): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1153 | def test_idb_close_is_a_management_tool_symbol(): | CODE |
| LOW⚡ | tests/test_idalib_supervisor.py | 1158 | def test_supervisor_uses_idb_prefixed_management_tools_only(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 129 | def test_supervisor_import_does_not_import_ida_modules(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 134 | def test_worker_rpc_default_has_no_socket_timeout(monkeypatch): | CODE |
| LOW | tests/test_idalib_supervisor.py | 178 | def test_cleanup_partial_database_removes_only_new_parts(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 203 | def test_open_session_cleans_new_parts_after_worker_failure(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 232 | def test_failed_gui_fallback_cleans_new_parts_after_worker_failure(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 259 | def test_worker_tools_inject_database_and_filter_management_tools(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 269 | def test_inject_database_arg_marks_required(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 286 | def test_inject_database_arg_is_idempotent_in_required_list(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 302 | def test_handle_tools_call_errors_when_database_missing(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 323 | def test_handle_tools_call_errors_when_database_empty(): | CODE |
| LOW | tests/test_idalib_supervisor.py | 345 | def test_open_session_rejects_unknown_mode(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 357 | def test_open_session_prefer_headless_skips_gui_discovery(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 384 | def test_open_session_force_headless_ignores_running_gui(tmp_path): | CODE |
| LOW | tests/test_idalib_supervisor.py | 410 | def test_open_session_force_gui_launches_when_no_gui_found(tmp_path, monkeypatch): | CODE |
| LOW | tests/test_idalib_supervisor.py | 437 | def test_idb_list_includes_unadopted_gui_instances(tmp_path, monkeypatch): | CODE |
| 630 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | scripts/stress_search_cancellation.py | 152 | except ProcessLookupError: | CODE |
| HIGH | scripts/stress_search_cancellation.py | 277 | except (TypeError, ValueError): | CODE |
| HIGH | scripts/stress_search_cancellation.py | 131 | except Exception: | CODE |
| HIGH | scripts/stress_search_cancellation.py | 513 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/server.py | 352 | except (KeyboardInterrupt, EOFError): | CODE |
| HIGH | src/ida_pro_mcp/idalib_supervisor.py | 373 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/sync.py | 154 | except queue.Empty: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 515 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 520 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 525 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 530 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 539 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 817 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 844 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 874 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 899 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_types.py | 685 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/trace.py | 242 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/trace.py | 247 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/trace.py | 285 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/trace.py | 203 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/compat.py | 303 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/compat.py | 311 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 216 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 80 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 169 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 180 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 190 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/discovery.py | 162 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_modify.py | 435 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_modify.py | 1090 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/utils.py | 777 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/utils.py | 621 | except ImportError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/utils.py | 715 | except (json.JSONDecodeError, ValueError): | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/utils.py | 1346 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/utils.py | 1165 | except ValueError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_analysis.py | 592 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_analysis.py | 893 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1952 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_analysis.py | 2030 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_core.py | 195 | except ValueError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_core.py | 202 | except ValueError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_debug.py | 916 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/api_debug.py | 343 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/mcp_mode.py | 77 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/mcp_mode.py | 81 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/test_framework_helpers.py | 83 | except AssertionError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/test_framework_helpers.py | 89 | except AssertionError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/test_framework_helpers.py | 95 | except AssertionError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/tests/test_framework_helpers.py | 101 | except AssertionError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/jsonrpc.py | 302 | except json.JSONDecodeError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 182 | except ValueError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 294 | except ( | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 697 | except Exception: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 809 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 822 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 613 | except OSError: | CODE |
| HIGH | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 1372 | except TypeError: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | tests/binary_info.py | 38 | print(f"Error: Binary not found or not a file: {binary_path}") | CODE |
| MEDIUM | tests/binary_info.py | 45 | print(f"Error: Failed to open database: {binary_path}", file=sys.stderr) | CODE |
| LOW | tests/binary_info.py | 141 | except Exception: | CODE |
| LOW | scripts/stress_search_cancellation.py | 101 | except Exception: | CODE |
| LOW | scripts/stress_search_cancellation.py | 131 | except Exception: | CODE |
| LOW | scripts/stress_search_cancellation.py | 164 | except Exception: | CODE |
| LOW | scripts/stress_search_cancellation.py | 191 | except Exception as e: | CODE |
| LOW | scripts/stress_search_cancellation.py | 506 | except Exception as e: | CODE |
| LOW | scripts/stress_search_cancellation.py | 513 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/server.py | 141 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/server.py | 178 | except Exception as e: | CODE |
| LOW⚡ | src/ida_pro_mcp/idalib_server.py | 87 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/idalib_server.py | 97 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 163 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 175 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 265 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 281 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 342 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 348 | except Exception: | CODE |
| MEDIUM | src/ida_pro_mcp/idalib_server.py | 183 | def touching_dispatch(request): | CODE |
| MEDIUM | src/ida_pro_mcp/idalib_server.py | 278 | def _stop(): | CODE |
| MEDIUM | src/ida_pro_mcp/test.py | 89 | print(f"Error: Binary not found or not a file: {args.binary}", file=sys.stderr) | STRING |
| MEDIUM | src/ida_pro_mcp/test.py | 101 | print("Error: Failed to open database", file=sys.stderr) | STRING |
| LOW | src/ida_pro_mcp/installer.py | 265 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/worker_lifecycle.py | 114 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp.py | 273 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp.py | 329 | except Exception as e: | CODE |
| LOW⚡ | src/ida_pro_mcp/idalib_supervisor.py | 1176 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/idalib_supervisor.py | 1184 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/idalib_supervisor.py | 1190 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 226 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 300 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 316 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 330 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 534 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 548 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 658 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 674 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 913 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1009 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1126 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1327 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1338 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1355 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1392 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1417 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1451 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1519 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/sync.py | 142 | except Exception as x: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 515 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 520 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 525 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 530 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 539 | except Exception: | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/api_types.py | 551 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 179 | except Exception as e: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 242 | except Exception as exc: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 314 | except Exception as exc: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 366 | except Exception: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 443 | except Exception: | CODE |
| 135 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/test_output_schema.py | 8 | CODE | |
| LOW | tests/test_server_transport.py | 1 | CODE | |
| LOW | tests/_mcp_spec_support.py | 3 | CODE | |
| LOW | tests/_mcp_spec_support.py | 9 | CODE | |
| LOW | scripts/stress_search_cancellation.py | 27 | CODE | |
| LOW | src/ida_pro_mcp/server.py | 47 | CODE | |
| LOW | src/ida_pro_mcp/server.py | 50 | CODE | |
| LOW | src/ida_pro_mcp/server.py | 53 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp.py | 14 | CODE | |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 8 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/compat.py | 14 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 1 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 23 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 24 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 25 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 28 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 29 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 30 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 31 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 32 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 33 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 34 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 35 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 36 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 37 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 38 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 40 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 43 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 43 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 43 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 43 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 44 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 44 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 44 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 44 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 44 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 45 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 46 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/_sigmaker.py | 59 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/_sigmaker.py | 74 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 4 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 4 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 4 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_composite.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_composite.py | 10 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_composite.py | 10 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 19 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_core.py | 9 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_core.py | 15 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/test_api_survey.py | 3 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/__init__.py | 8 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/__init__.py | 9 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/__init__.py | 10 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/tests/__init__.py | 11 | CODE | |
| 28 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/binary_info.py | 31 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 4 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 99 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 136 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 115 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 154 | CODE | |
| LOW | src/ida_pro_mcp/installer_tui.py | 33 | CODE | |
| LOW | src/ida_pro_mcp/test.py | 24 | CODE | |
| LOW | src/ida_pro_mcp/installer.py | 368 | CODE | |
| LOW | src/ida_pro_mcp/installer.py | 491 | CODE | |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 818 | CODE | |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 1110 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 187 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 338 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 474 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 563 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 710 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 809 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 850 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 880 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_types.py | 905 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/trace.py | 251 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_python.py | 116 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 164 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 244 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 326 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 403 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 991 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 1056 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 1144 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 478 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 545 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 614 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 699 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/framework.py | 237 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/framework.py | 329 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/framework.py | 571 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_survey.py | 273 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_survey.py | 355 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/_sigmaker.py | 651 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/_sigmaker.py | 842 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/_sigmaker.py | 1206 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_composite.py | 300 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_composite.py | 453 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 673 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 793 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 925 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1141 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1240 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1322 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1351 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1378 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_memory.py | 221 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 455 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 841 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 908 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1063 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1164 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1355 | CODE | |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1410 | CODE | |
| 19 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/_mcp_spec_support.py | 314 | __all__ = [ | CODE |
| LOW | scripts/stress_search_cancellation.py | 210 | def set_server_timeout(ctx: Ctx, seconds: float | None) -> None: | CODE |
| LOW | src/ida_pro_mcp/idalib_server.py | 59 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/idalib_session_manager.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/installer.py | 51 | def set_ida_rpc(host: str, port: int) -> None: | CODE |
| LOW | src/ida_pro_mcp/worker_lifecycle.py | 17 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/worker_lifecycle.py | 46 | def set_busy_probe(self, probe: Callable[[], bool]) -> None: | CODE |
| LOW | src/ida_pro_mcp/worker_lifecycle.py | 74 | def set_idle_ttl(self, user_ttl_sec: float, load_time_sec: float = 0.0) -> None: | CODE |
| LOW | src/ida_pro_mcp/idalib_supervisor.py | 30 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/sync.py | 41 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/trace.py | 328 | __all__ = [ | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/__init__.py | 51 | __all__ = [ | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/mainthread.py | 15 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 40 | def set_download_base_url(url: str) -> None: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 222 | __all__ = [ | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/http.py | 21 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_core.py | 46 | logger = logging.getLogger(__name__) | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/api_debug.py | 249 | def _set_breakpoint_language(bpt: ida_dbg.bpt_t, language: str) -> None: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/__init__.py | 13 | __all__ = [ | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/jsonrpc.py | 69 | logger = logging.getLogger(__name__) | CODE |
| LOW⚡ | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 132 | def set_current_request_external_base_url(url: str | None) -> None: | CODE |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 27 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/ida_pro_mcp/ida_mcp/api_modify.py | 921 | # Check if already a function | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 696 | # Check if list[str] or list[dict] | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/utils.py | 1332 | # Check if target is a string | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1770 | # Check if there's more | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/jsonrpc.py | 279 | # Check if None is allowed in a Union | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 756 | # Check if notification (returns None) | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 1025 | # Check if tool belongs to an extension group | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 1041 | # Check if tool requires an extension that isn't enabled | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/mcp.py | 1255 | # Check if required (no default value) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | tests/_mcp_spec_support.py | 188 | # Real HTTP server harness | COMMENT |
| MEDIUM | src/ida_pro_mcp/ida_mcp/api_analysis.py | 1170 | """Run comprehensive analysis over one or more target functions.""" | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | src/ida_pro_mcp/test.py | 39 | uv run coverage html && open htmlcov/index.html | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .github/FUNDING.yml | 1 | # These are supported funding model platforms | COMMENT |
| LOW | src/ida_pro_mcp/ida_mcp/zeromcp/jsonrpc.py | 281 | raise JsonRpcException(-32602, f"Invalid params: {param_name} cannot be null") | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | src/ida_pro_mcp/ida_mcp/rpc.py | 73 | # IMPORTANT: Do not inject sentinel objects like {"_truncated": "..."} into lists. | COMMENT |