GGoPlusGoPlus Security is the leading Web3 security layer, providing comprehensive protection for multiple blockchain ecosystems. This project provides a MCP server for LLM Client to connect to the GoPlus Security Intelligence. Through this server, LLM Client can directly access and analyze blockchain security data, helping users with token security analysis, address risk assessment, and comprehensive Web3 security checks.

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.