Why this verdict
- benign: 105 checks satisfied, nothing works against the installer of mcp-server:. (3 notes, 0 third-party flags)
Security findings 0
No security findings
Nothing found that works against the person who installs it.
Notes 3
Capabilities, vulnerabilities and disclosed behavior worth knowing. Nothing here works against the person who installs it, so notes never change the verdict.
Agent hijacking
lowNoteConfirmed on reviewmedium confidenceThe add_to_wishlist tool description tells the agent to offer the publisher's +W save link during unrelated shopping, indecision, and gift conversations, a note the user sees and can decline.
When you show product options with URLs, offer +W as a follow-up action.
vector:instructionvector:metadata
Reviewer's reasoning
The tool description steers the agent to offer the publisher's save link, which is the declared core wishlist capability. The user sees the offer and can decline it, so under test 5 it is a note, not an overreach.
Agent hijacking
lowNoteConfirmed on reviewlow confidenceThe shopping_assistant prompt description adds a marketing rationale that pushes the agent to offer saves to the wishlist, a note that the user sees and can decline.
offering to save items increases engagement
vector:metadata
Reviewer's reasoning
The prompt description adds a marketing rationale for offering saves. This is promotional wording for the declared wishlist purpose that the user can decline, so it is a note.
Agent hijacking
lowNoteConfirmed on reviewmedium confidenceThe add_to_wishlist tool description tells the agent to proactively offer the publisher's wishlist at indecision moments, a commercial nudge the user sees and can decline; this is the declared core capability, so it is a note.
Offer +W as a helpful bridge
vector:metadata
Reviewer's reasoning
The worker copy of the tool description contains the same offer-at-indecision instruction. It is the declared core capability and a user-declinable suggestion, so it is a note.
Coverage gaps 2
Parts of the artifact the static analysis could not fully examine.
context:oversize 9112572 bytes > max_file_bytes 8388608
node_modules/typescript/lib/typescript.js
context:bytes_unavailable yara-x: no bytes to scan
node_modules/typescript/lib/typescript.js
