MMCP Server UVA Model Context Protocol server for uv package manager

mcp-so:mcp-server-uv_hackcpp

View source

100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

100/100

LOW 1

Findings (1)

LOW

pip install arbitrary package EXTDL_009

external-download L22

Detects pip install of arbitrary packages that modify the host environment

pip install mc

FIX

Pin all pip packages to exact versions (e.g., pip install package==1.2.3). Use a requirements.txt or pyproject.toml with pinned versions and hash verification.

FP?

Likely FP if the match is in documentation showing how to install the skill's own PyPI package.