Atlas / MCP servers / peterfei / AI Agent Team

AI Agent TeamBLOCK

Name: AI Agent Team
Author: peterfei

mcp/peterfei/ai-agent-team

MCP server by peterfei · 24886 · ai · ai agents · Audited 2026-10-01

⚑ Report / re-scan Source ↗

AI Agent Team-拥有24/7专业AI开发团队:产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装,支持中英文命令,大幅提升开发效率!

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

21 17r · 3w · 1d

Transport

stdio

License

MIT

Stars

440

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

💛 Sponsored by DolOffer — GPT & Claude 正版会员充值,输入优惠码 AI8888 享9折特惠

🚀 拥有24/7专业AI开发团队:产品经理、全栈开发、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人

💾 Thread Manager 让 AI 拥有记忆! 语义搜索 | 任务线程管理 | 完整上下文恢复 | 自动 Git 版本控制

⚡ 只需 3 步完成安装 → 马上开始使用!

Agent Skills(独立安装)

这些 Skill 已发布为独立仓库,可通过 skills install 命令安装到任意项目中:

兼容 Claude Code / Cursor / Codex CLI / Gemini CLI / Windsurf 等 50+ 运行时。

🚀 快速开始

✨ 核心特性

🎯 **八大

Read from source at commit 6ea3a1777623OBSERVED · 2026-10-01

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add ai-agent-team --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "ai-agent-team": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GITHUB_TOKEN": "${GITHUB_TOKEN}"
      }
    }
  }
}

Exposed tools (21)

17 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`API接口模块`	read	提供RESTful API接口供前端调用
`add_message`	write	Add a message to the current active thread. Use this to record conversation messages.
`create_thread`	write	Create a new conversation thread to isolate context for a specific task.
`delete_thread`	destructive	Delete a thread and all associated data permanently.
`get_current_thread`	read	Get information about the currently active thread.
`get_thread`	read	Get detailed information about a specific thread, optionally including messages and file changes.
`list_threads`	read	List all conversation threads with filtering and sorting options.
`search_messages`	read	Semantically searches for relevant messages in the conversation history based on a natural language query.
`switch_thread`	read	Switch the active context to a specific thread.
`track_file_change`	read	Record a file change event for the current active thread. If stats are not provided, they will be auto-detected from git.
`update_thread`	write	Update the metadata (title, description, tags) of a thread.
`业务逻辑模块`	read	处理核心业务逻辑,实现系统的核心功能
`报表统计模块`	read	生成各类统计报表和数据可视化图表
`数据处理模块`	read	负责数据的增删改查和业务逻辑处理
`数据访问模块`	read	负责数据的存储、检索和管理,确保数据的一致性和完整性
`文件管理模块`	read	处理文件上传、下载和存储功能
`日志监控模块`	read	记录系统运行日志,提供系统监控和性能分析功能
`消息通知模块`	read	实现系统消息推送和邮件通知功能
`用户界面模块`	read	负责用户交互和界面展示,提供直观友好的操作界面
`用户管理模块`	read	实现用户注册、登录、权限管理等功能
`系统配置模块`	read	管理系统配置和参数设置,支持动态配置和热更新

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: declared (8 observation(s))
Shell: declared (7 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (19)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

.claude/skills/changelog-generator/src/utils/ConfigLoader.js:62

return yaml.load(content);

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

.claude/skills/softcopyright/scripts/auto-print-pdf.js:24

const child = exec(`${command} "${htmlPath}"`, (error) => {

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete_thread

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.changelogrc.json

.changelogrc.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.claude/skills/changelog-generator/src/exporters/HTMLExporter.js:440

{{{prLink this ../../../config.template.prUrl}}}

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.claude/skills/changelog-generator/src/exporters/HTMLExporter.js:465

{{{prLink this ../../../config.template.prUrl}}}

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.claude/skills/changelog-generator/tests/unit/ChangelogGenerator.test.js:1

const ChangelogGenerator = require('../../src/core/ChangelogGenerator');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.claude/skills/changelog-generator/tests/unit/CommitClassifier.test.js:1

const CommitClassifier = require('../../src/core/CommitClassifier');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

.claude/skills/changelog-generator/tests/unit/GitAnalyzer.test.js:1

const GitAnalyzer = require('../../src/core/GitAnalyzer');

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

.claude/skills/changelog-generator/package.json

@octokit/rest, chalk, commander, conventional-commits-parser, dotenv, handlebars, inquirer, js-yaml

Why it matters. 14 dependency range(s) float