MCP server

Workopia — Job Search

mcp:workopia/workopia-mcp

Search 6.3M+ live jobs from companies' own career pages, plus resume tailoring & cover letters.

awesome-mcp-servers Glama MCP Registry

Verdict

Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 26, 2026, 13:49 UTC at 252128e

findings

high

highest severity

threat classes

files scanned

147/147

checks satisfied

package advisories

Why this verdict

suspicious: unverified finding plugin:.:bin/run.js:11:EXEC

Security findings 1

Code execution

highUnverifiedlow confidence

bin/run.js spawns the locally installed mcp-remote binary with a fixed workopia.io MCP URL, bridging stdio to a remote server; this is the plugin's declared purpose with a hardcoded argument and no untrusted input reaching the command.

bin/run.js:11

["https://workopia.io/api/mcp-jobs"],

vector:code