Skip to main content

mcp-tools-as-code

Transforms MCP servers into typed TypeScript APIs, enhancing code execution efficiency and reducing token usage significantly.

Install this skill

or
74/100

Security score

The mcp-tools-as-code skill was audited on Mar 3, 2026 and we found 6 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 188

Template literal with variable interpolation in command context

SourceSKILL.md
188console.log(`Found ${relevantRows.length} active records`);
medium line 282

Template literal with variable interpolation in command context

SourceSKILL.md
282const inputInterface = schemaToInterface(tool.inputSchema, `${tool.name}Input`);
medium line 283

Template literal with variable interpolation in command context

SourceSKILL.md
283const outputInterface = schemaToInterface(tool.outputSchema, `${tool.name}Output`);
medium line 285

Template literal with variable interpolation in command context

SourceSKILL.md
285return `
medium line 341

Template literal with variable interpolation in command context

SourceSKILL.md
341summary: `User ${userData.firstName} has ${userData.orderCount} orders`,
low line 377

External URL reference

SourceSKILL.md
377- [Code Execution with MCP](https://www.anthropic.com/engineering/code-execution-with-mcp) - Original Anthropic engineering blog post
Scanned on Mar 3, 2026
View Security Dashboard
Installation guide →