Atlas / MCP servers / blitzsicht / falzmarke

falzmarkeBLOCK

mcp/blitzsicht/falzmarke

Auf den Millimeter geprüft, nicht nur behauptet: DIN-5008-Briefe aus Markdown, als PDF/A gesetzt. Skill für KI-Agenten und CLI.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
—
Transport
stdio · streamable-http
License
MIT
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/blitzsicht/falzmarke/actions/workflows/ci.yml) [](https://github.com/blitzsicht/falzmarke/releases/latest) [](https://github.com/blitzsicht/falzmarke/blob/main/LICENSE) [](https://github.com/blitzsicht/falzmarke/blob/main/pyproject.toml) [](https://github.com/blitzsicht/falzmarke/blob/main/skill/references/din5008.md)

Andere Werkzeuge erzeugen ein PDF. falzmarke prüft das Ergebnis.

Du schreibst den Inhalt als Markdown. falzmarke setzt daraus einen Geschäftsbrief nach DIN 5008:2020 als PDF/A — und misst anschließend das fertige PDF nach. Sitzt die Falzmarke nicht auf 105,0 mm, endet der Lauf mit einem Fehler statt mit einem Brief, der nur ungefähr stimmt.

[falzmarke.com — Anleitung ohne Terminal](https://falzmarke.com) · [⬇ Als Claude-Skill laden](https://github.com/blitzsicht/falzmarke/releases/latest/download/falzmarke.skill) · In 60 Sekunden ausprobieren · [Beispielbrief ansehen](https://github.com/blitzsicht/falzmarke/raw/main/docs/renders/brief-form-b.png)

Linux · macOS · Windows · 34 Maße je Seite · PDF/A-2b · MIT

English overview

In Bewegung

![Ein Terminal zeigt den Musterbrief als Markdown, danach den Lauf von falzmarke render: PDF und Vorschau werd

Read from source at commit 6b27a6a9ed7cOBSERVED · 2026-10-11
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (pypi)
claude mcp add falzmarke -- uvx falzmarke==0.9.15
03

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (4 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95
skill/falzmarke/regeln/__init__.py:139
return yaml.load(pfad.read_text(encoding="utf-8"), Loader=_OhneDoppelte) or {}
Why it matters. deserialises untrusted bytes into live objects
Fix. use json or yaml.safe_load
MEDIUMInventory / provenance · inv.binary · CWE-1104
skill/falzmarke/assets/fonts/SourceSans3-It.otf
SourceSans3-It.otf
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
skill/falzmarke/assets/fonts/SourceSans3-Regular.otf
SourceSans3-Regular.otf
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
skill/falzmarke/assets/fonts/SourceSans3-Semibold.otf
SourceSans3-Semibold.otf
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
skill/falzmarke/assets/fonts/SourceSans3-SemiboldIt.otf
SourceSans3-SemiboldIt.otf
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/quellenlage.py:81
"sind nie ein Fehler, auch wenn ihr Beleg es hergäbe ([ADR 0035](../../docs/entscheidungen/0035-vier-ebenen-fuer-email-regeln.md)).",
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
tests/test_oeffnen.py:436
felder = {**FELDER, "anhaenge": [("../../etc/passwd", b"x")]}
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
.github/workflows/ci.yml:203
export PIP_INDEX_URL=http://127.0.0.1:1/simple PIP_RETRIES=0 PIP_TIMEOUT=1
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
.github/workflows/ci.yml:213
export PIP_INDEX_URL=http://127.0.0.1:1/simple PIP_RETRIES=0 PIP_TIMEOUT=1
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/test_referenzdienst.py:161
yield f"http://127.0.0.1:{port}"
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/test_referenzdienst.py:234
urllib.request.urlopen(f"http://127.0.0.1:{port}{rd.CHALLENGE_PFAD}", timeout=5)
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/test_skillpaket.py:97
("PIP_INDEX_URL=http://127.0.0.1:1/simple", "PyPI wird nicht unerreichbar gemacht"),
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
scripts/mcp_handschlag.py:197
pdf = base64.b64decode(roh)
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
skill/falzmarke/dienst.py:330
pdf.write_bytes(base64.b64decode(pdf_base64))
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
skill/falzmarke/eml.py:425
roh = base64.b64decode(wert.split(";base64,", 1)[1], validate=False)
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
skill/falzmarke/lint.py:1198
bild = base64.b64decode(quelle.quelle.split(";base64,", 1)[1], validate=False)
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
tests/test_befehl_email.py:185
roh = b64.b64decode(ergebnis["eml_base64"]).decode("utf-8")
LOWObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
tests/test_serie.py:252
"irma,ort\nMuster GmbH,Musterstadt\n".encode("utf-8"))
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
docs/marke/video/erklaerfilm/package.json
@remotion/cli, react, react-dom, remotion, @types/react, @types/react-dom, typescript
Why it matters. 7 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
mcp-dienst/requirements.txt
mcp, pyyaml
Why it matters. 2 requirement(s) not pinned with ==
Fix. pin exact versions
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
skill/requirements.txt
typst, pyyaml, pdfplumber, pypdf, markdown-it-py, pillow
Why it matters. 6 requirement(s) not pinned with ==
Fix. pin exact versions
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table
INFOInventory / provenance · inv.oversize · CWE-1104
docs/assets/brand/falzmarke_logo.ai
docs/assets/brand/falzmarke_logo.ai
Why it matters. 1818027 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
docs/renders/erklaerfilm-16x9.mp4
docs/renders/erklaerfilm-16x9.mp4
Why it matters. 1925402 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
docs/renders/erklaerfilm-9x16.mp4
docs/renders/erklaerfilm-9x16.mp4
Why it matters. 1910166 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 6b27a6a9ed7cfull audit observations/trust-audit/mcp-server/blitzsicht__falzmarke.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-116b27a6a9ed7cBLOCKD69first audit
05

Questions

What is the falzmarke MCP server?

Auf den Millimeter geprüft, nicht nur behauptet: DIN-5008-Briefe aus Markdown, als PDF/A gesetzt. Skill für KI-Agenten und CLI.

Is falzmarke safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does falzmarke need?

No credential environment variables were found in its source, so it appears to need none.

How does falzmarke run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as falzmarke-erklaerfilm at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (6b27a6a9ed7c), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement