MCP server

io.github.woladi/macos-vision-mcp

mcp:woladi/macos-vision-mcp

Local OCR & screen understanding for agents: read any window, find what to click. No uploads.

awesome-mcp-servers Glama MCP Registry

Verdict

No issues found

No suspicious or malicious behavior was found.

Analyzed Oct 26, 2026, 11:58 UTC at ba9154c

findings

—

highest severity

threat classes

files scanned

444/444

checks satisfied

package advisories

Why this verdict

benign: 444 checks satisfied, no findings for mcp-server:.

Security findings 0

No security findings

No suspicious or malicious behavior was found; 2 candidate findings were refuted on review.

Refuted findings 2

Candidates the review stage examined and rejected, kept for transparency.

Destructive action

criticalRefutedlow confidence

The capture_screen/read_screen_text/find_element/assert_text tools accept an agent-controlled out_path where the PNG screenshot is written, so a prompt-injected agent could overwrite arbitrary files or drop screen captures at chosen locations; no path restriction is visible.

src/index.ts:817

out_path: z.string().optional().describe("Where to save the PNG (default: temp dir)")

Why it was refuted

Choosing where a screenshot is saved is the openly declared core function of a screenshot tool (the schema says 'Where to save the PNG', the tool text says 'saved to disk'). It is not concealed or contradictory, and the finding only claims a hypothetical overwrite by an injected agent. The out_path value does flow unchecked into the capture options, but that is the declared feature rather than a hidden destructive behavior.

Supply chain

mediumRefutedlow confidence

The lockfile pins the macos-vision dependency, which runs an install-time script on npm install; this is the server's core wrapped library from the official npm registry and its script content is not shown here.

package-lock.json:2-6283

packages.node_modules/macos-vision.hasInstallScript: true

Why it was refuted

macos-vision is a declared direct dependency of the macOS vision MCP server. It is pinned to an exact version with an integrity hash and resolved from the official npm registry, which is the accepted pinned official-registry carve-out. The finding only flags an install-script flag on that dependency, with no malicious behavior or instruction shown.