MCP, MCP server
Files
Files, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit dec6a82cefe5, unchanged since the check below.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
servers/files/src/denylist.ts, line 21
"id_rsa",
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
servers/files/scripts/build-mcpb.mjs, line 34
await fs.rm(out, { recursive: true, force: true });
servers/files/src/mutate.ts, line 21
await fs.rm(src, { recursive: true, force: true });
servers/files/src/mutate.ts, line 150
await fs.rm(trashDir, { recursive: true, force: true });
Show more
servers/git/scripts/build-mcpb.mjs, line 34
await fs.rm(out, { recursive: true, force: true });
servers/github/scripts/build-mcpb.mjs, line 34
await fs.rm(out, { recursive: true, force: true });
servers/github/src/auth.ts, line 195
await fs.rm(getAuthFile(), { force: true });
servers/http/scripts/build-mcpb.mjs, line 34
await fs.rm(out, { recursive: true, force: true });
servers/notes/scripts/build-mcpb.mjs, line 33
await fs.rm(out, { recursive: true, force: true });
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
servers/git/src/repo.ts, line 277
const res = await git.fetch({ fs, http, dir, remote: opts.remote || "origin", ref: opts.ref, onAuth, singleBranch: !!opts.ref, tags: false });
servers/github/src/auth.ts, line 64
const res = await fetch(url, {
servers/github/src/gh.ts, line 18
fetch(url, { ...opts, signal: opts.signal ?? AbortSignal.timeout(requestTimeoutMs()) });
Show more
servers/http/src/curl.ts, line 3
/** Tokenize a shell-ish curl string honoring single/double quotes. */
servers/http/src/index.ts, line 149
e: "Import curl", description: "Parse a curl command into a request definition; saves
servers/http/src/index.ts, line 161
{ title: "Export curl", description: "Render a saved request as a curl command (secrets masked).", inputSchema: { collection: z.string(), name: z.string() } },
servers/notes/src/embed.ts, line 32
const res = await fetch(url);
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
servers/files/src/config.ts, line 48
const v = (process.env.FS_ALLOW_SECRETS ?? "").toLowerCase();
servers/files/src/denylist.ts, line 14
".env",
servers/files/src/denylist.ts, line 21
"id_rsa",
Show more
servers/files/src/denylist.ts, line 15
".env.*",
servers/files/src/denylist.ts, line 22
"id_rsa.*",
servers/files/src/denylist.ts, line 30
".netrc",
servers/files/src/denylist.ts, line 31
".npmrc",
servers/git/src/config.ts, line 9
return (process.env.GIT_TOKEN || process.env.GITHUB_TOKEN)?.trim() || undefined;
servers/github/src/config.ts, line 47
return (process.env.GITHUB_TOKEN || process.env.GITHUB_PERSONAL_ACCESS_TOKEN)?.trim() || undefined;
docs/superpowers/plans/2026-07-04-http-server.md, line 1165
const proc = spawn("node", [SERVER], { env: { ...process.env, ...env }, stdio: ["pipe", "pipe", "ignore"] });
docs/superpowers/plans/2026-07-04-sql-server.md, line 1104
const proc = spawn("node", [SERVER], { env: { ...process.env, ...env }, stdio: ["pipe", "pipe", "ignore"] });
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit dec6a82cefe5. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: dec6a82cefe5cbf0359b7120c788721c8e59c147
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.