74
/ 100
18 days ago
glama

forensic-artifact-investigator

MCP server for read-only forensic analysis of evidence files using local utilities (file, ExifTool, strings, Volatility).

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 1 credential: VIRUSTOTAL_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@4.0.16GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configEVIDENCE_TEST_PATH"$PWD/tests/fixtures/suspect_photo.jpg" \
configMCP_TRANSPORT_TYPE$env: = "stdio"
🔐 secretVIRUSTOTAL_API_KEY"message": "Set to enable live threat intelligence lookups."
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/guyoverclocked-forensic-analyzer-mcp-1hf0aa)](https://m8ven.ai/mcp/guyoverclocked-forensic-analyzer-mcp-1hf0aa)
commit: 1fcab8fa879db633e31b1c0a390c258e360928b4
code hash: 5ca83dcd8842f05c1ba6e6a7c134a5f61d28108dd7934deff3f1366c126fb961
verified: 7/13/2026, 9:57:17 AM
view raw JSON →