SSVGMaker MCP ServerA powerful MCP server for generating, editing, and converting SVG images using AI, uses the best vector generation models
mcp-so:svgmaker-mcp-server_GenWave
View sourceA
100/100 First Seen
Feb 19, 2026
Last Scanned
Feb 20, 2026
Findings
1
Score
100/100
LOW 1
Findings (1)
LOW
npx MCP server without version pin
L66 Detects MCP server configs using npx to run packages without version pinning
"command": "npx" FIX
Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.
FP?
Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.