hivemind-mcp

The server uses `child_process.execSync` within the `scanProject` function, which can be a security risk if the `projectPath` argument is not properly sanitized or if the execution environment is compromised. The `INTERNAL_ARCHITECTURE.md` explicitly states that Row-Level Security (RLS) is 'PENDING' on the Supabase database, which is a critical backend vulnerability, potentially allowing unauthorized access to data if the service role key is compromised or misused. However, the system includes strong positive security features for its public gateway, such as credential scanning on contributions (rejecting submissions with API keys, tokens, etc.), rate limiting per IP, IP banning capabilities, and the removal of previously hardcoded anonymous keys.