Histórico de Auditoria

AI review did not confirm the static scanner high-risk malware indicators. Most external command, weak crypto, C2, reconnaissance, and entropy hits are false positives caused by Markdown examples, Grasshopper command names, and UUID-like component GUIDs. The remaining risk is medium because the skill includes Python scripts that read and write local files and send user-provided modeling commands to a local Grasshopper MCP socket.

Legitimate Grasshopper workflow automation tool. All 527 static findings are false positives: C2 keywords are UUIDs in GUID mappings, external_commands are Ruby code examples in documentation, and weak crypto patterns are references in documentation. The tool communicates via TCP with local MCP server on port 8080, reads/writes JSON and MMD files within project directories only, and has no external network calls or data exfiltration.

Legitimate Grasshopper workflow automation tool. All 527 static findings are false positives: C2 keywords are UUIDs in GUID mappings, external_commands are Ruby code examples in documentation, and weak crypto patterns are references in documentation. The tool communicates via TCP with local MCP server on port 8080, reads/writes JSON and MMD files within project directories only, and has no external network calls or data exfiltration.

Legitimate Grasshopper MCP workflow automation tool. Uses TCP sockets to communicate with local Grasshopper MCP server on port 8080. File system access is limited to JSON/MMD file reading and writing within project directories. No dangerous code execution patterns, no external network calls, no credential theft or data exfiltration. All capabilities are necessary for the stated parametric modeling purpose.

Legitimate Grasshopper MCP workflow automation tool. Uses TCP sockets to communicate with local Grasshopper MCP server on port 8080. File system access is limited to JSON/MMD file reading and writing within project directories. No dangerous code execution patterns, no external network calls, no credential theft or data exfiltration. All capabilities are necessary for the stated parametric modeling purpose.

Legitimate Grasshopper MCP workflow automation tool. Uses TCP sockets to communicate with local Grasshopper MCP server on port 8080. File system access is limited to JSON/MMD file reading and writing within project directories. No dangerous code execution patterns, no external network calls, no credential theft or data exfiltration. All capabilities are necessary for the stated parametric modeling purpose.