Back to plugin

Security audit

KeplerPlugin

Security checks for vulnerabilities and agentic risk

Overview

Kepler’s save-and-recall purpose is coherent, but its MCP setup runs an unpinned remote Python script that also handles persistent Kepler OAuth access.

Review before installing. The Kepler functionality itself is consistent with saving and recalling links, but the MCP runner should ideally be pinned to a reviewed version, and you should be comfortable with local OAuth token storage and the assistant accessing your saved Kepler spaces.

Static analysis

No suspicious patterns detected.