OOctagonExtensive real-time Public Market (stocks, financial data, SEC, transcripts, 13-F) & Private Market Intelligence (private companies, funding, investors, M&A, debts, deep research). Perfect for investors, asset managers, & developers. For full access to Octagon Agents, sign up here: https://app.octagonai.co

mcp-so:octagon_OctagonAI

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

92/100

MEDIUM 1

Findings (1)

MEDIUM

Auto-confirm flag bypassing user verification MCPCFG_008

mcp-config L64

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

"-y"

FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.