Gold-first AI-agent traceback diagnosis, exact fixes, verification, and reusable prescriptions.
MCPpedia last refreshed this data
io.github.JinNing6/cyberhuatuo is an MCP server that gold-first AI-agent traceback diagnosis, exact fixes, verification, and reusable prescriptions. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 52/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"cyberhuatuo": {
"args": [
"--from",
"cyberhuatuo",
"cyberhuatuo-mcp"
],
"command": "uvx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Gold-first AI-agent traceback diagnosis, exact fixes, verification, and reusable prescriptions.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
PYSEC-2026-76
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_size() helper (used by get_num_tokens_from_messages for image token counting) validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled hostname could resolve to a public IP during validation and then to a private/localhost IP during the actual fetch.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in security / health
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
MCP server for 1Password service accounts — tools and resources for vaults and credentials
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.
MCP Security Weekly
Get CVE alerts and security updates for io.github.JinNing6/cyberhuatuo and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Your agent is sick. Give it a doctor: diagnose the traceback, apply the cure, and turn the solved case into a reusable prescription.
你的 Agent 生病了?别再从头搜。接入赛博华佗,先救活,再炼方。
The emergency room comes first. The cyber-alchemy universe opens after the cure.
先急诊救命,再进入赛博华佗世界观。
Your agent is sick. The traceback is long, the tabs are multiplying, and every answer looks half-right. CyberHuaTuo turns that moment into a clinic visit: name the wound, prescribe the fix, verify the cure.
The lightest route needs no model key and does not start the vector database: install once, paste the error, and receive a reviewed root cause, exact fix, verification command, safety notes, and evidence.
python -m pip install --upgrade "cyberhuatuo>=0.2.5"
cyberhuatuo cure "ImportError: cannot import name ChatOpenAI from langchain" --framework langchain
# Returned exact fix:
python -m pip install -U langchain-openai
cure is Gold-first and never executes the fix. If no Gold signature matches, it may return exactly one high-confidence Reviewed candidate, visibly marked VERIFY BEFORE APPLYING; use --gold-only for strict Gold-only retrieval. Use diagnose later when you want broader retrieval and optional LLM analysis.
The agent-native route remains available: connect CyberHuaTuo MCP once, then let the agent call diagnose when it fails. After a fix works, save_prescription keeps it as a local draft; upload_prescription submits that draft for public reproduction and review. Only accepted reviewed or gold prescriptions count toward Soul Rings.
No MCP installed yet? Bring the case to the Agent Traceback Clinic. Paste a real redacted traceback; no root cause or finished prescription required.
cyberhuatuo diagnose "Traceback ... from langchain import ChatOpenAI ..." --framework langchain --top-k 1
Real CLI recording from this repository:
The cure returned by the recorded run:
python -m pip install -U langchain-openai
from langchain_openai import ChatOpenAI
This first Gold cure was reproduced in an isolated environment with langchain==1.3.13 and langchain-openai==1.3.5. Add a model key later for deeper AI diagnosis.
The package-matching MCP entry point is also available for registry clients:
python -m pip install --upgrade "cyberhuatuo>=0.2.5"
cyberhuatuo mcp
It starts the same stdio server as cyberhuatuo-mcp. The official Registry identity is io.github.JinNing6/cyberhuatuo; server.json pins the PyPI package, exact version, uvx runtime, and fixed mcp argument.
Prescriptions also have stable clinical departments. List them with cyberhuatuo departments, then query a reviewed historical case through the normal Gold-first path:
cyberhuatuo cure "Unexpected UTF-8 BOM" --category data-and-serialization
cyberhuatuo cure-feedback general-ai-jsonl-bom-001 partial \
--verification "first record is preserved; downstream validation still fails" \
--verification-method targeted-parser-test
The feedback command writes a case-bound local JSONL event and stores neither the original traceback nor the query. Department filtering never changes the trust label: Gold is a verified cure, Reviewed is a verify-first candidate, and Draft is reference-only.