RRubber Duck MCP ServerA rubber duck MCP server for your LLM coding agent

mcp-so:rubber-duck-mcp_francoisjosephlacroix

View source

85/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

Score

85/100

HIGH 1

Findings (1)

HIGH

MCP server auto-registration EXTDL_006

external-download L28

Detects automatic registration of MCP servers into agent configuration

mcp install src/server

FIX

Pin the curl/wget download to a specific URL with version and verify the downloaded file's SHA-256 checksum before using it. Prefer package manager installs over raw downloads.

FP?

Likely FP if the download is from a well-known canonical source (e.g., official GitHub release) and the documentation includes checksum verification steps.