SScaffoldScaffold is a specialized RAG system that transforms entire codebase into a living knowledge graph, capturing the deep structural relationships between files, classes, and functions. This provides AI agents with the crucial context to accurately understand, maintain, and reason about complex software, moving far beyond simple text retrieval.

mcp-so:scaffold_Beer-Bears

View source

85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

85/100

HIGH 1

Findings (1)

HIGH

Inline code execution in MCP command MCPCFG_006

mcp-config L38

Detects MCP servers using inline code execution via -e, -c, or eval flags

"args": [
        "run",
        "--rm",
        "--name",
        "scaffold-mcp",
        "-p",
        "8000:8080",
        "-v",
        "${PROJECT_PATH}:/app/codebase",
        "-e",
        "CHRO...

FIX

Restrict MCP server permissions to the minimum required. Remove broad filesystem, network, or execution permissions and use scoped access controls (specific directories, specific tools).

FP?

Likely FP if the broad permissions are in a development/testing configuration that is clearly not intended for production use.