超超能文献MCP(AI文档翻译+文献检索)🚀 Suppr MCP - 让学术翻译更智能 (https://suppr.wilddata.cn/) 打破语言壁垒,加速科研进程!Suppr提供业界领先的AI文档翻译服务,特别针对学术论文优化,完美处理复杂的数学公式和专业术语。支持PDF、Word、PPT、excel、epub、HTML等7种文档格式,覆盖11种主流语言互译。 内置PubMed智能搜索引擎,让文献检索更精准高效。无论是翻译外文论文还是搜索前沿研究,Suppr都是科研工作者的得力助手。 🎯 核心亮点: • 数学公式智能翻译优化 • 支持7种文档格式、11种语言 • AI驱动的学术文献搜索 • 异步任务处理,高效批量翻译 • 完整的翻译历史管理 由 WildData 团队精心打造,值得信赖的学术服务平台。

mcp-so:suppr-mcp_WildDataX

View source
A
92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

2

Score

92/100

MEDIUM 1
LOW 1

Findings (2)

MEDIUM
Auto-confirm flag bypassing user verification
L75

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

"-y"
FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

LOW
npx MCP server without version pin
L73

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"
FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.