mcp2cli
Transforms MCP servers into standalone Bash scripts for easy command-line access and integration.
Install this skill
or
0/100
Security score
The mcp2cli skill was audited on Mar 3, 2026 and we found 12 security issues across 4 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
critical line 97
Direct command execution function call
SourceSKILL.md
| 97 | return execSync(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }); |
high line 93
Template literal with variable interpolation in command context
SourceSKILL.md
| 93 | .map(([k, v]) => `${k}:${JSON.stringify(v)}`) |
high line 95
Template literal with variable interpolation in command context
SourceSKILL.md
| 95 | const cmd = `npx mcporter call --stdio "${MCP_CMD}" ${SERVER}.${tool} ${paramStr}`; |
medium line 86
Node child_process module reference
SourceSKILL.md
| 86 | import { execSync } from "child_process"; |
high line 46
Curl to non-GitHub URL
SourceSKILL.md
| 46 | curl -s "https://registry.npmjs.org/<package>" | jq -r '.readme // .description' |
high line 52
Curl to non-GitHub URL
SourceSKILL.md
| 52 | curl -s "https://pypi.org/pypi/<package>/json" | jq -r '.info.description // .info.summary' |
medium line 156
Access to hidden dotfiles in home directory
SourceSKILL.md
| 156 | # Use ~/agent-tools/bin if ~/agent-tools/ exists, otherwise ~/.local/bin |
medium line 160
Access to hidden dotfiles in home directory
SourceSKILL.md
| 160 | BIN_DIR=~/.local/bin |
low line 171
Access to hidden dotfiles in home directory
SourceSKILL.md
| 171 | Append to ~/.claude/CLAUDE.md using the fetched description: |
low line 196
Access to hidden dotfiles in home directory
SourceSKILL.md
| 196 | - Registration: confirmed in ~/.claude/CLAUDE.md |
low line 46
External URL reference
SourceSKILL.md
| 46 | curl -s "https://registry.npmjs.org/<package>" | jq -r '.readme // .description' |
low line 181
External URL reference
SourceSKILL.md
| 181 | <server>-<tool3> --url "https://example.com" |
Scanned on Mar 3, 2026
View Security DashboardGitHub Stars 2
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
majiayu000/claude-skill-registry-data