maven-mcp — Maven dependency intelligence plugin (Grok Build / Cursor / Claude Code)
MIT plugin bundling a zero-dependency Python MCP server that registers via .mcp.json for Grok Build and mcp.json for Cursor, letting the agent look up Maven artifact versions, scan Gradle and Maven projects for outdated
SafeScan verdict · score 56/100
- Coverage
- full
- Checks run
- Rule-based pattern scan
- Files checked
- 92
- Findings
- 4
- Scanned
- 2026-11-01
Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.
Botlens score · 8 factors
56/100
Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.
| Scan verdict | 1/1 | Safe | |
|---|---|---|---|
| Code coverage | 1/1 | full | |
| Rule findings | 0/1 | 11 matched | |
| No executable scripts | 0/1 | 49 script file(s) of 92 | |
| Pinned source | 1/1 | commit/SHA-256 recorded | |
| Named author | 0/1 | unknown | |
| Recently seen | 1/1 | last seen 2026-10-30 | |
| Install path | 0.5/1 | source URL only |
Scan details
- Findings
- Hand review 2026-11-01: Every tool-poisoning / hidden-text / obfuscation hit read in full: they are safety or truthfulness rules, normal CSS UI styles, eval/benchmark wording, data-URI images or test fixtures, not hidden instructions.
- reads environment variables (where API keys live) in tests/_helpers.py: "…e-enable per-test via temp_cache_dir(). os.environ.setdefault("MAVEN_MCP_CACHE_DISABLE", "…"
- reads environment variables (where API keys live) in tests/test_agent_plugin.py: "…y() as data_dir: env = dict(os.environ) env["PLUGIN_ROOT"] = _PLUG…"
- reads environment variables (where API keys live) in tests/test_airgap.py: "… with unittest.mock.patch.dict("os.environ", {}, clear=False): for key…"
- Content SHA-256
- fbe20b49ff10a8e9…
- Commit
- bed3b3af92
- Files
- .gitignore
AGENTS.md
CLAUDE.md
LICENSE
README.md
pyproject.toml
+86
About
- Author
- kirich1409 ↗
- Listed on
- github:RongleCat/awesome-grok-bot ↗
- Category (approx.)
- agentops
- First seen
- 2026-10-30
- Last seen
- 2026-10-30
- URL
- github.com ↗