mcpfile
Manages Docker-based MCP servers, allowing users to start/stop services and check their status efficiently.
Install this skill
or
87/100
Security score
The mcpfile skill was audited on May 17, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 6
Access to hidden dotfiles in home directory
SourceSKILL.md
| 6 | mcpfile is a CLI that manages Docker-based MCP servers defined in `~/.config/mcpfile/config.toml`. |
low line 13
Access to hidden dotfiles in home directory
SourceSKILL.md
| 13 | cat ~/.config/mcpfile/config.toml |
low line 25
Access to hidden dotfiles in home directory
SourceSKILL.md
| 25 | mcpfile install-skill # install Claude Code skill to ~/.claude/skills/ |
medium line 54
Access to hidden dotfiles in home directory
SourceSKILL.md
| 54 | - Secrets are cached at `~/.cache/mcpfile/<service>/` with 1hr TTL |
low line 50
External URL reference
SourceSKILL.md
| 50 | - **SSE transport**: creates container with ephemeral host port, prints `<service> is running on http://localhost:<port>` |
Scanned on May 17, 2026
View Security Dashboard