A
92/100 First Seen
Feb 19, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
92/100
MEDIUM 1
Findings (1)
MEDIUM
Auto-confirm flag bypassing user verification
L34 Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation
"-y" FIX
Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.
FP?
Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.