NNova MCP ServersNova MCP servers collection - Puppeteer, GitHub, and Basic Memory integrations

mcp-so:nova-mcp_pfin

View source

85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

85/100

HIGH 1

Findings (1)

HIGH

MCP server auto-registration EXTDL_006

external-download L30

Detects automatic registration of MCP servers into agent configuration

claude mcp add

FIX

Pin the curl/wget download to a specific URL with version and verify the downloaded file's SHA-256 checksum before using it. Prefer package manager installs over raw downloads.

FP?

Likely FP if the download is from a well-known canonical source (e.g., official GitHub release) and the documentation includes checksum verification steps.