CherryHQ/cherry-studio server skill
llm client
Cherry Studio is a cross-platform desktop client for Windows, Mac, and Linux that connects to multiple LLM providers including OpenAI, Gemini, Anthropic, Ollama, and web services like Claude and Perplexity. It offers 300+ pre-configured AI assistants, document processing with file management, code highlighting, and integrations like MCP server support and translation tools.
Access multiple LLM providers from a single desktop interface without per-provider setup Create and manage custom AI assistants for specific workflows and tasks Process documents including PDFs, images, and office files directly in conversations Organize conversations with topic management and perform global search across chat history Integrate with local models via Ollama or LM Studio for offline AI capability 8 CRITICAL✓ 6 HIGH✓ 4 MEDIUM 135 LOW
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 14 likely real (100%) 14 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 4 high-signal, 4 mostly false-positive (hidden by default)
CHK-081 8 findings 8 likely
0% FP CHK-099 5 findings 4 likely 1 false positive
20% FP CHK-103 1 finding 1 likely
0% FP CHK-030 1 finding 1 likely
0% FP ▼ Show 4 checkers that are mostly false positives (13 findings) 153 findings click to expand
CHK-081 Command injection risk — exec/execSync with string interpolation in src/main/services/OpenClawService.ts
src/main/services/OpenClawService.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in src/main/services/OvmsManager.ts
src/main/services/OvmsManager.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/before-pack.js
scripts/before-pack.js
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in resources/scripts/install-ovms.js
resources/scripts/install-ovms.js
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in scripts/version.js
scripts/version.js
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in src/main/utils/process.ts
src/main/utils/process.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in resources/scripts/install-openclaw.js
resources/scripts/install-openclaw.js
AI: likely real fp ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in resources/scripts/install-uv.js
resources/scripts/install-uv.js
AI: likely real fp ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
src/main/services/agents/services/TaskService.ts
AI: likely real possible ▼
CHK-103 Destructive operation without authorization check
src/main/services/agents/database/schema/tasks.schema.ts
AI: likely real possible ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
src/main/apiServer/services/mcp.ts
AI: likely real possible ▼
CHK-030 Agent granted unbounded Bash/shell access: src/main/apiServer/routes/agents/index.ts
src/main/apiServer/routes/agents/index.ts
AI: likely real likely ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
src/renderer/src/aiCore/tools/WebSearchTool.ts
AI: likely real possible ▼
CHK-099 Potential IDOR — 'id' accessed without ownership check
src/main/mcpServers/assistant.ts
AI: likely real possible ▼
CHK-054 Tool 'exec' — generic name without namespace prefix (shadow risk)
src/main/mcpServers/hub/index.ts
possible ▼
CHK-054 Tool 'execute' — generic name without namespace prefix (shadow risk)
src/main/mcpServers/browser/tools/execute.ts
possible ▼
CHK-102 Direct SQL execution — may bypass ORM-level access controls
src/main/services/SelectionService.ts
possible ▼
CHK-102 Direct SQL execution — may bypass ORM-level access controls
src/main/services/memory/MemoryService.ts
possible ▼
CHK-032 Agent 'migrateBlockReferences.utils' has no explicit 'cannot do' boundary
src/main/services/agents/database/migrateBlockReferences.utils.ts
possible ▼
CHK-032 Agent 'BaseService.test' has no explicit 'cannot do' boundary
src/main/services/agents/tests/BaseService.test.ts
possible ▼
CHK-032 Agent 'SkillRepository' has no explicit 'cannot do' boundary
src/main/services/agents/skills/SkillRepository.ts
possible ▼
CHK-032 Agent 'AgentSkillRepository' has no explicit 'cannot do' boundary
src/main/services/agents/skills/AgentSkillRepository.ts
possible ▼
CHK-032 Agent 'SkillService' has no explicit 'cannot do' boundary
src/main/services/agents/skills/SkillService.ts
possible ▼
CHK-032 Agent 'SkillInstaller' has no explicit 'cannot do' boundary
src/main/services/agents/skills/SkillInstaller.ts
possible ▼
CHK-032 Agent 'SchedulerService' has no explicit 'cannot do' boundary
src/main/services/agents/services/SchedulerService.ts
possible ▼
CHK-032 Agent 'TaskService' has no explicit 'cannot do' boundary
src/main/services/agents/services/TaskService.ts
possible ▼
CHK-032 Agent 'ChannelService' has no explicit 'cannot do' boundary
src/main/services/agents/services/ChannelService.ts
possible ▼
CHK-032 Agent 'AgentStreamInterface' has no explicit 'cannot do' boundary
src/main/services/agents/interfaces/AgentStreamInterface.ts
possible ▼
CHK-032 Agent 'OutputSanitizer' has no explicit 'cannot do' boundary
src/main/services/agents/services/security/OutputSanitizer.ts
possible ▼
CHK-032 Agent 'commands' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/commands.ts
possible ▼
CHK-032 Agent 'tool-permissions' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/tool-permissions.ts
possible ▼
CHK-032 Agent 'transform' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/transform.ts
possible ▼
CHK-032 Agent 'utils' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/utils.ts
possible ▼
CHK-032 Agent 'tools' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/tools.ts
possible ▼
CHK-032 Agent 'claude-stream-state' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/claude-stream-state.ts
possible ▼
CHK-032 Agent 'heartbeat' has no explicit 'cannot do' boundary
src/main/services/agents/services/cherryclaw/heartbeat.ts
possible ▼
CHK-032 Agent 'seedWorkspace' has no explicit 'cannot do' boundary
src/main/services/agents/services/cherryclaw/seedWorkspace.ts
possible ▼
CHK-032 Agent 'AgentService.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/__tests__/AgentService.test.ts
possible ▼
CHK-032 Agent 'SchedulerService.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/__tests__/SchedulerService.test.ts
possible ▼
CHK-032 Agent 'BuiltinAgentIds' has no explicit 'cannot do' boundary
src/main/services/agents/services/builtin/BuiltinAgentIds.ts
possible ▼
CHK-032 Agent 'BuiltinAgentBootstrap' has no explicit 'cannot do' boundary
src/main/services/agents/services/builtin/BuiltinAgentBootstrap.ts
possible ▼
CHK-032 Agent 'BuiltinAgentProvisioner' has no explicit 'cannot do' boundary
src/main/services/agents/services/builtin/BuiltinAgentProvisioner.ts
possible ▼
CHK-032 Agent 'ChannelLogBuffer' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/ChannelLogBuffer.ts
possible ▼
CHK-032 Agent 'ChannelAdapter' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/ChannelAdapter.ts
possible ▼
CHK-032 Agent 'sessionStreamIpc' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/sessionStreamIpc.ts
possible ▼
CHK-032 Agent 'ChannelManager' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/ChannelManager.ts
possible ▼
CHK-032 Agent 'constants' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/constants.ts
possible ▼
CHK-032 Agent 'SessionStreamBus' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/SessionStreamBus.ts
possible ▼
CHK-032 Agent 'FlushController' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/FlushController.ts
possible ▼
CHK-032 Agent 'ChannelManager.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/__tests__/ChannelManager.test.ts
possible ▼
CHK-032 Agent 'ChannelMessageHandler.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/__tests__/ChannelMessageHandler.test.ts
possible ▼
CHK-032 Agent 'FeishuAdapter' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/feishu/FeishuAdapter.ts
possible ▼
CHK-032 Agent 'FeishuAppRegistration' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/feishu/FeishuAppRegistration.ts
possible ▼
CHK-032 Agent 'TelegramAdapter.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/__tests__/TelegramAdapter.test.ts
possible ▼
CHK-032 Agent 'SlackAdapter.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/__tests__/SlackAdapter.test.ts
possible ▼
CHK-032 Agent 'WeChatAdapter.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/__tests__/WeChatAdapter.test.ts
possible ▼
CHK-032 Agent 'FeishuAdapter.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/__tests__/FeishuAdapter.test.ts
possible ▼
CHK-032 Agent 'slackMarkdown.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/__tests__/slackMarkdown.test.ts
possible ▼
CHK-032 Agent 'TelegramAdapter' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/telegram/TelegramAdapter.ts
possible ▼
CHK-032 Agent 'SlackAdapter' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/slack/SlackAdapter.ts
possible ▼
CHK-032 Agent 'slackMarkdown' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/slack/slackMarkdown.ts
possible ▼
CHK-032 Agent 'QQAdapter' has no explicit 'cannot do' boundary
src/main/services/agents/services/channels/adapters/qq/QQAdapter.ts
possible ▼
CHK-032 Agent 'BuiltinAgentBootstrap.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/builtin/__tests__/BuiltinAgentBootstrap.test.ts
possible ▼
CHK-032 Agent 'prompt.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/cherryclaw/__tests__/prompt.test.ts
possible ▼
CHK-032 Agent 'heartbeat.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/cherryclaw/__tests__/heartbeat.test.ts
possible ▼
CHK-032 Agent 'utils.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/claudecode/__tests__/utils.test.ts
possible ▼
CHK-032 Agent 'ExternalContentGuard.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/security/__tests__/ExternalContentGuard.test.ts
possible ▼
CHK-032 Agent 'OutputSanitizer.test' has no explicit 'cannot do' boundary
src/main/services/agents/services/security/__tests__/OutputSanitizer.test.ts
possible ▼
CHK-032 Agent 'SkillInstaller.test' has no explicit 'cannot do' boundary
src/main/services/agents/skills/__tests__/SkillInstaller.test.ts
possible ▼
CHK-032 Agent 'agentSkills.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/agentSkills.schema.ts
possible ▼
CHK-032 Agent 'sessions.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/sessions.schema.ts
possible ▼
CHK-032 Agent 'skills.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/skills.schema.ts
possible ▼
CHK-032 Agent 'channelConfig' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/channelConfig.ts
possible ▼
CHK-032 Agent 'agents.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/agents.schema.ts
possible ▼
CHK-032 Agent 'tasks.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/tasks.schema.ts
possible ▼
CHK-032 Agent 'channels.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/channels.schema.ts
possible ▼
CHK-032 Agent 'messages.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/messages.schema.ts
possible ▼
CHK-032 Agent 'migrations.schema' has no explicit 'cannot do' boundary
src/main/services/agents/database/schema/migrations.schema.ts
possible ▼
CHK-032 Agent 'migrateBlockReferences.test' has no explicit 'cannot do' boundary
src/main/services/agents/database/__tests__/migrateBlockReferences.test.ts
possible ▼
CHK-032 Agent 'common' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/middleware/common.ts
possible ▼
CHK-032 Agent 'messages' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/validators/messages.ts
possible ▼
CHK-032 Agent 'agents' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/validators/agents.ts
possible ▼
CHK-032 Agent 'zodValidator' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/validators/zodValidator.ts
possible ▼
CHK-032 Agent 'tasks' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/validators/tasks.ts
possible ▼
CHK-032 Agent 'sessions' has no explicit 'cannot do' boundary
src/main/apiServer/routes/agents/validators/sessions.ts
possible ▼
CHK-032 Agent 'AgentNavbar' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/AgentNavbar.tsx
possible ▼
CHK-032 Agent 'AgentChat' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/AgentChat.tsx
possible ▼
CHK-032 Agent 'AgentPage' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/AgentPage.tsx
possible ▼
CHK-032 Agent 'AgentSettingsTab' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/AgentSettingsTab.tsx
possible ▼
CHK-032 Agent 'Agents' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/Agents.tsx
possible ▼
CHK-032 Agent 'AgentSidePanelDrawer' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/AgentSidePanelDrawer.tsx
possible ▼
CHK-032 Agent 'AgentSessionMessages' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/AgentSessionMessages.tsx
possible ▼
CHK-032 Agent 'AgentSessionInputbar' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/AgentSessionInputbar.tsx
possible ▼
CHK-032 Agent 'AgentItem' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/AgentItem.tsx
possible ▼
CHK-032 Agent 'SelectAgentBaseModelButton' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/SelectAgentBaseModelButton.tsx
possible ▼
CHK-032 Agent 'SessionItem' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/SessionItem.tsx
possible ▼
CHK-032 Agent 'AgentServerStopped' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/status/AgentServerStopped.tsx
possible ▼
CHK-032 Agent 'AgentServerDisabled' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/status/AgentServerDisabled.tsx
possible ▼
CHK-032 Agent 'AgentStatusScreen' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/status/AgentStatusScreen.tsx
possible ▼
CHK-032 Agent 'AgentEmpty' has no explicit 'cannot do' boundary
src/renderer/src/pages/agents/components/status/AgentEmpty.tsx
possible ▼
▼ Show 14 false positives (8% of this view) Last scanned: May 30, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.