MMalloy MCP ServerAn MCP Server for interacting with Malloy data models through the Malloy Publisher

mcp-so:malloy-mcp-server_namabile

View source

100/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

Score

100/100

LOW 1

Findings (1)

LOW

pip install arbitrary package EXTDL_009

external-download L41

Detects pip install of arbitrary packages that modify the host environment

pip install ma

FIX

Pin all pip packages to exact versions (e.g., pip install package==1.2.3). Use a requirements.txt or pyproject.toml with pinned versions and hash verification.

FP?

Likely FP if the match is in documentation showing how to install the skill's own PyPI package.