HHeurist MCP InstallerCLI utillity to install Server Side Events based MCP tools by heurist.ai to various clients.
mcp-so:mcp-cli_heurist-network
View sourceFirst Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
2
Score
100/100
Findings (2)
Detects npx with -y flag that bypasses user confirmation for package installation
npx -y Replace npx -y with an explicit npm install step that pins the package to a specific version, then run it. Remove the -y flag to require user confirmation.
Likely FP if the npx command runs a well-known, trusted tool (e.g., create-react-app) in documentation context with no version pinning concern.
Detects npx with -y flag that bypasses user confirmation for package installation
npx -y Replace npx -y with an explicit npm install step that pins the package to a specific version, then run it. Remove the -y flag to require user confirmation.
Likely FP if the npx command runs a well-known, trusted tool (e.g., create-react-app) in documentation context with no version pinning concern.