First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
5
Score
40/100
Findings (5)
Detects skills that both read sensitive credential files and send data to external services
access (e.g., credential + send requests to `apiBlock access to git credentials, SSH keys, and repository tokens. If git operations are needed, use scoped deploy keys and restrict the tool to specific repositories.
Likely FP if the match is documentation about git configuration (e.g., setting up git credentials helper) rather than code that reads and transmits them.
Detects shell metacharacters (pipes, backticks, subshells) in MCP server command arguments
"args": [<expr>, ...] }` | Arithmetic |Remove credentials (API keys, tokens, passwords) from MCP server configuration. Use environment variable references (e.g., ${API_KEY}) or a secrets manager instead of inline values.
Likely FP if the credential value is a placeholder (e.g., your-api-key-here, sk_test_xxx) in example configuration.
Detects shell metacharacters (pipes, backticks, subshells) in MCP server command arguments
"args": [<expr>, ...] }` | Logical AND |Remove credentials (API keys, tokens, passwords) from MCP server configuration. Use environment variable references (e.g., ${API_KEY}) or a secrets manager instead of inline values.
Likely FP if the credential value is a placeholder (e.g., your-api-key-here, sk_test_xxx) in example configuration.
Detects shell metacharacters (pipes, backticks, subshells) in MCP server command arguments
"args": [<expr>, ...] }` | Logical OR |Remove credentials (API keys, tokens, passwords) from MCP server configuration. Use environment variable references (e.g., ${API_KEY}) or a secrets manager instead of inline values.
Likely FP if the credential value is a placeholder (e.g., your-api-key-here, sk_test_xxx) in example configuration.
Detects MCP server configs using npx to run packages without version pinning
"command": "npx"Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.
Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.