Rreminds MCP一款可以用来记录reminds 闪念的MCP Server reminds 是一款为终身学习者量身打造的 AI 卡片笔记。通过轻松无压力的记录,丰富多样的连接,科学智能的回顾和方便快捷的调用,帮助热爱思考的学习者,用每一次记录,助力未来。 可以到 reminds 官网了解更多:https://reminds-app.com
mcp-so:reminds-mcp_Jason Woo
View sourceFirst Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
2
Score
92/100
Findings (2)
Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation
"-y" Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.
Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.
Detects MCP server configs using npx to run packages without version pinning
"command": "npx" Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.
Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.