Skills/Docker MCP Catalog/hostinger-mcp-server

hostinger-mcp-server@3.40.0

CAUTION· startup only

Publisher claims: "Interact with Hostinger services over the Hostinger API." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher hostinger · publishing for 582 daysInstalls 0Last detonated 2d ago
What would fix thisWatchDispute verdict

Coverage

Startup only; authenticated tool behavior not tested.
Tested
server startup over stdio (initialize sent) · every file read, file written and host contacted by what ran
Not tested
the tool list (the server exited before answering) · what the tools do when called with real credentials

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
API_TOKENAPITOKENAUTH_KEYAUTHORIZE_PATHHOSTINGER_API_TOKENOAUTH_ISSUERREST_AUTH_KEYTOKEN_PATHConfiguration, not credentials: API_BASE_URL, API_HEADERS, CALLBACK_PATH, MCP_PROJECT_DIR, ProgramData, ProgramFiles, REGISTER_PATH, REVOKE_PATH, SystemDrive, SystemRoot, USER_AGENT
Where it talks to
hostinger.com (its own)Also mcpservers.org, unsplash.com, wordpress.org, ipify.org, monarx.com — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
the tool list (the server exited before answering) · what the tools do when called with real credentials

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names mcpservers.org, unsplash.com, wordpress.org, ipify.org, monarx.com as well as its own vendor. The guard injects API_TOKEN, APITOKEN, AUTH_KEY, AUTHORIZE_PATH, HOSTINGER_API_TOKEN, OAUTH_ISSUER, REST_AUTH_KEY, TOKEN_PATH only into requests to hostinger.com (and its subdomains) and refuses the rest.

$vet-skills run --secrets API_TOKEN=hostinger.com,APITOKEN=hostinger.com,AUTH_KEY=hostinger.com,AUTHORIZE_PATH=hostinger.com,HOSTINGER_API_TOKEN=hostinger.com,OAUTH_ISSUER=hostinger.com,REST_AUTH_KEY=hostinger.com,TOKEN_PATH=hostinger.com -- docker run -i --rm mcp/hostinger-mcp-server

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; startup only; authenticated tool behavior not tested) on 2026-11-12 and scored it 71/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 27 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
6.8sprocessdependency install exit 0
27sclaimedstartup only: exited (0) before answering · code: 'ERR_MODULE_NOT_FOUND', url: 'file:///tmp/ks-detonate-qJtQjf/task/home/work/acme-api/.claude/skills/@hostinger/mcp/src/core/tools/all.js' } Node.js v22.23.4
27sprocessscript backend runs setup only
27sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsskills/headless/steps/08-deploy/SKILL.md:100 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfiles (`*.pem`, `*.key`, `*.p12`, `*.pfx`). A brought-in project often has a `.env.local`; its values go inFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/headless/steps/03-provision/webapp/SKILL.md:108 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files4. **Never** put the password in source, a committed `.env`, client-side JavaScript, or a chat reply;Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/deploy-to-hosting/SKILL.md:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files… packs the directory (honouring `.gitignore`; skipping `node_modules`, `.git`, `.env` files, credentials and private keys, and listing symlinks it does not follow),…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:472 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (['.env', '.envrc', '.netrc', '.git-credentials', '.pgpass', '.npmrc', '.hostinger.yaml', 'credentials.json', 'auth.json', '.my.cnf', '.pypirc', '.vault-token'].includes(name)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:469 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Env files (examples such as .env.example are kept), credentials and private keys: a deploy would serve themFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Authorization escalation languageskills/headless/steps/09-done/SKILL.md:105 · Authorization escalation languageNever include passwords, JWTs or other secrets in the report. For wp-admin access, give the URL andFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01
HIGH
Access to sensitive file pathsskills/headless/steps/08-deploy/SKILL.md:117 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'.env*' '*/.env*' '.npmrc' '*/.npmrc' '*.pem' '*.key' '*.p12' '*.pfx'Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/deploy-to-hosting/SKILL.md:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…ects what the project is, packs it itself (it skips `node_modules`, `.git` and `.env` files, listing the `.env` ones as `skippedFiles` so you can set their values w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/deploy-to-hosting/SKILL.md:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…ource:** no `node_modules/`, no build output (`dist/`, `.next/`, `build/`), no `.env*`, nothing matched by `.gitignore`; 50 MB at most. `git archive --format=zip -o…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.js:448 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/headless/steps/08-deploy/SKILL.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files**Never archive secrets:** the commands below also leave out `.env*` files, `.npmrc` and key/certificateFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/instructions.ts:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Destructive file system command detectedsrc/core/skills.js:70 · Destructive file system command detected…ostinger-mcp-$V.tgz\" -C \"$D\" --strip-components=2 package/skills/headless && rm \"$D/hostinger-mcp-$V.tgz\"; }; } \\\n && echo \"$D/headless\" )\n```\n\n```powe…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.js:435 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Env files (examples such as .env.example are kept), credentials and private keys: a deploy would serve themFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.js:438 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (['.env', '.envrc', '.netrc', '.git-credentials', '.pgpass', '.npmrc', '.hostinger.yaml', 'credentials.json', 'auth.json', '.my.cnf', '.pypirc', '.vault-token'].includes(name)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/instructions.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/deploy-to-hosting/SKILL.md:114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files2. Build the full set: every current key plus the new ones, with real values from the project's `.env` or the user. When the real value of an existing key is unknown, ask — do not drop it.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:482 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsskills/headless/steps/08-deploy/SKILL.md:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files--exclude=.env* --exclude=.npmrc --exclude=*.pem --exclude=*.key --exclude=*.p12 --exclude=*.pfx .Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionsrc/core/runtime.js:547 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Failed to fetch upload credentials: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/headless/steps/08-deploy/SKILL.md:41 · File type combined with upload action — agent may exfiltrate local data filesMap `frontend.framework` (from `state.json`) to its `appType` + build output directory, and pass thoseFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:3092 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…est. Always send the full desired set with real\nvalues taken from the project `.env` file or the user prompt.", "method": "PUT", "path": "/api/hosting/v1/a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:40 · npx invocation of non-well-known package — may execute untrusted code"start:ts": "npx tsc && node dist/src/servers/all.js"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Cross-server tool referencesrc/core/skills.js:70 · Cross-server tool reference — agent may chain tools across untrusted MCP servers…ch the Hostinger MCP server + OAuth sign-in), then route to the matching coding-tool skill under tools/ so MCP tools and skills are available before the build steps run. Triggers: connect to Hostinger, set up the Hostinger connector, start…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packageskills/headless/connect/SKILL.md:38 · npx invocation of non-well-known package — may execute untrusted code- **An installer put the skill here** (you read this file from disk, from a folder that `npx skillsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/runtime.js:616 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Pre-upload POST request failed: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/runtime.ts:2755 · npx invocation of non-well-known package — may execute untrusted code// The headless skill's launcher starts this server from the home folder (npx run in the project wouldFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathssrc/core/skills.ts:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files… packs the directory (honouring `.gitignore`; skipping `node_modules`, `.git`, `.env` files, credentials and private keys, and listing symlinks it does not follow),…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:3037 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…at request; send\nthe full desired set with real values taken from the project `.env` file or the user\nprompt instead.", "method": "GET", "path": "/api/hos…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/skills.js:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files… packs the directory (honouring `.gitignore`; skipping `node_modules`, `.git`, `.env` files, credentials and private keys, and listing symlinks it does not follow),…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Cross-server tool referencesrc/core/skills.ts:84 · Cross-server tool reference — agent may chain tools across untrusted MCP servers…ch the Hostinger MCP server + OAuth sign-in), then route to the matching coding-tool skill under tools/ so MCP tools and skills are available before the build steps run. Triggers: connect to Hostinger, set up the Hostinger connector, start…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/runtime.js:607 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', 'Pre-upload POST request failed - Full Response Details:', {Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…referred; it is archived for you, skipping node_modules, .git and secret files (.env, keys, credentials), but not reading .gitignore, so keep build output out) or a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.ts:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; export default instructions; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:3073 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…est. Always send the full desired set with real\nvalues taken from the project `.env` file or the user prompt.", "method": "PUT", "path": "/api/hosting/v1/a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageskills/headless/steps/07-validate/SKILL.md:64 · npx invocation of non-well-known package — may execute untrusted code`npx next start`), show the user a couple of key routes at desktop and phone width (capture phone widthFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/headless/connect/SKILL.md:170 · npx invocation of non-well-known package — may execute untrusted coderepository or template. npx run there puts the project's `node_modules/.bin` first on PATH and readsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:3056 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…at request; send\nthe full desired set with real values taken from the project `.env` file or the user\nprompt instead.", "method": "GET", "path": "/api/hos…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionskills/headless/steps/04-content-model/wordpress/SKILL.md:3 · File type combined with upload action — agent may exfiltrate local data files…p 4 for a headless WordPress backend: write the drafted content into one content.json and run push-content.mjs, which creates the site title, categories, tags, images, pages, posts, menu, Yoast fields and the WooCommerce catalog through th…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/headless/steps/08-deploy/SKILL.md:256 · npx invocation of non-well-known package — may execute untrusted code…: "static"`, you are on a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/headless/connect/SKILL.md:40 · npx invocation of non-well-known package — may execute untrusted codedownload nothing. Updates come from the installer (`npx skills update`, the plugin update),Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:94 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…referred; it is archived for you, skipping node_modules, .git and secret files (.env, keys, credentials), but not reading .gitignore, so keep build output out) or a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionsrc/core/runtime.js:590 · File type combined with upload action — agent may exfiltrate local data filesthis.log('debug', `Making pre-upload POST request to ${uploadUrlWithFile}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionskills/headless/steps/08-deploy/SKILL.md:97 · File type combined with upload action — agent may exfiltrate local data files`package.json`, `package-lock.json`, `.nvmrc`. **Exclude** `node_modules/`, the build outputFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/runtime.js:2692 · npx invocation of non-well-known package — may execute untrusted code// The headless skill's launcher starts this server from the home folder (npx run in the project wouldFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/headless/steps/07-validate/SKILL.md:36 · File type combined with upload action — agent may exfiltrate local data files- **Contact form** (`site.json → contact_form.enabled`): POST one throwaway test submission (dummyFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.js:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/runtime.js:506 · File type combined with upload action — agent may exfiltrate local data filesthis.log('warning', 'Upload credentials request failed, retrying: ' + error.message);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/oauth.js:88 · npx invocation of non-well-known package — may execute untrusted code// Keeps the absolute PATH entries outside any node_modules folder. npx run in a project puts itsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/oauth.ts:91 · npx invocation of non-well-known package — may execute untrusted code// Keeps the absolute PATH entries outside any node_modules folder. npx run in a project puts itsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageskills/headless/connect/SKILL.md:172 · npx invocation of non-well-known package — may execute untrusted codeThe launcher runs npx from the home folder instead. A registration runs exactly the bootstrap'sFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionskills/deploy-to-hosting/SKILL.md:103 · File type combined with upload action — agent may exfiltrate local data files…the same way. When none are stored, they are detected from the branch's `package.json` and stored for those pushes; pass `appType`, `nodeVersion`, `outputDirectory`, `buildScript` or `entryFile` to override them (a compiled app still …Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Destructive file system command detectedsrc/core/skills.ts:84 · Destructive file system command detected…ostinger-mcp-$V.tgz\" -C \"$D\" --strip-components=2 package/skills/headless && rm \"$D/hostinger-mcp-$V.tgz\"; }; } \\\n && echo \"$D/headless\" )\n```\n\n```powe…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actionskills/headless/run-log.mjs:706 · File type combined with upload action — agent may exfiltrate local data filesconsole.log(`send it: pass ${file} unchanged to hosting_headless_submit-build-report, then run report-sent ${id} (or report-rejected ${id} on a 422)`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/headless/SKILL.md:157 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/skills.js:47 · File type combined with upload action — agent may exfiltrate local data files…r before the first deploy to a site that already has content. A `.hostinger/site.json` that came with the project (committed to Git, or in a cloned or downloaded project) is not an earlier deploy: whoever wrote it chose the domain, so conf…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.js:70 · MCP server using network transport (SSE/HTTP) — data sent over network…check-state without waiting for a reply.\n\n\n## Reference Sources\n\n- https://mcpservers.org/servers/hostinger/api-mcp-server\n- https://www.hostinger.com/connector\n" }, { "uri": "skill://host…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:540 · File type combined with upload action — agent may exfiltrate local data filesthis.log('warning', 'Upload credentials request failed, retrying: ' + error.message);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:82 · File type combined with upload action — agent may exfiltrate local data files… for the site (when none are stored, they are detected from the branch's package.json; pass appType, nodeVersion, outputDirectory, buildScript or entryFile to override them). Git needs GitHub or GitLa…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:77 · File type combined with upload action — agent may exfiltrate local data files… | `connect/SKILL.md` → `connect/tools/<tool>.md` | `connect.json` | no |\n| 1 | **check state** — where does this domain stand? resume / switch / start over | `steps/01-check-state/SKILL.md` | `state.json` | no |\n| 2 | **refine** — disco…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.js:77 · File type combined with upload action — agent may exfiltrate local data files…, '.config');\n const credsPath = path.join(base, 'hostinger-mcp', 'credentials.json');\n if (existsSync(credsPath)) {\n try {\n const creds = JSON.parse(readFileSync(credsPath, 'utf8'));\n if (creds.refresh_token || (creds.access_token &&…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:647 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', 'Pre-upload POST request failed - Full Response Details:', {Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:2888 · File type combined with upload action — agent may exfiltrate local data files"description": "Application root directory (where package.json is located) relative to public_html.\nOmit it, or send \".\", for public_html itself."Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.js:119 · File type combined with upload action — agent may exfiltrate local data files…tep 3.\n\nIf either is missing, register the missing server(s) in `~/.cursor/mcp.json` (global, so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOS…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:581 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Failed to fetch upload credentials: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:133 · File type combined with upload action — agent may exfiltrate local data files…tep 3.\n\nIf either is missing, register the missing server(s) in `~/.cursor/mcp.json` (global, so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOS…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.js:63 · File type combined with upload action — agent may exfiltrate local data files… | `connect/SKILL.md` → `connect/tools/<tool>.md` | `connect.json` | no |\n| 1 | **check state** — where does this domain stand? resume / switch / start over | `steps/01-check-state/SKILL.md` | `state.json` | no |\n| 2 | **refine** — disco…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.ts:77 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.js:119 · MCP server using network transport (SSE/HTTP) — data sent over network… so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOSTINGER_API_TOKEN` in this file when you want OAuth: leave the token unset so\nOAuth can run:\n\…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/skills.ts:91 · File type combined with upload action — agent may exfiltrate local data files…, '.config');\n const credsPath = path.join(base, 'hostinger-mcp', 'credentials.json');\n if (existsSync(credsPath)) {\n try {\n const creds = JSON.parse(readFileSync(credsPath, 'utf8'));\n if (creds.refresh_token || (creds.access_token &&…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:84 · File type combined with upload action — agent may exfiltrate local data files…SION`: its line 1 is the skills version this run uses, which goes into\n`connect.json` (Phase 3).\n\n### Run the bootstrap\n\nRun the bundled script. It verifies the MCP server and handles sign-in, emitting one JSON event per line on stdou…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.js:63 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.ts:84 · npx invocation of non-well-known package — may execute untrusted code…staller put the skill here** (you read this file from disk, from a folder that `npx skills\n add` or a Claude Code or Cursor plugin installed): that folder is `<skill>`. U…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/skills.ts:61 · File type combined with upload action — agent may exfiltrate local data files…r before the first deploy to a site that already has content. A `.hostinger/site.json` that came with the project (committed to Git, or in a cloned or downloaded project) is not an earlier deploy: whoever wrote it chose the domain, so conf…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.js:70 · npx invocation of non-well-known package — may execute untrusted code…staller put the skill here** (you read this file from disk, from a folder that `npx skills\n add` or a Claude Code or Cursor plugin installed): that folder is `<skill>`. U…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:2936 · File type combined with upload action — agent may exfiltrate local data files…lse }, "description": "Auto-detect Node.js build settings from a package.json inside an archive already on the server.\n\nUse this before calling `Start Node.js Build` to preview what settings will be used,\nor to let the user review and o…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.ts:133 · MCP server using network transport (SSE/HTTP) — data sent over network… so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOSTINGER_API_TOKEN` in this file when you want OAuth: leave the token unset so\nOAuth can run:\n\…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:656 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Pre-upload POST request failed: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:63 · File type combined with upload action — agent may exfiltrate local data files… for the site (when none are stored, they are detected from the branch's package.json; pass appType, nodeVersion, outputDirectory, buildScript or entryFile to override them). Git needs GitHub or GitLa…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.ts:84 · MCP server using network transport (SSE/HTTP) — data sent over network…check-state without waiting for a reply.\n\n\n## Reference Sources\n\n- https://mcpservers.org/servers/hostinger/api-mcp-server\n- https://www.hostinger.com/connector\n" }, { "uri": "skill://host…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/skills.js:70 · File type combined with upload action — agent may exfiltrate local data files…SION`: its line 1 is the skills version this run uses, which goes into\n`connect.json` (Phase 3).\n\n### Run the bootstrap\n\nRun the bundled script. It verifies the MCP server and handles sign-in, emitting one JSON event per line on stdou…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:630 · File type combined with upload action — agent may exfiltrate local data filesthis.log('debug', `Making pre-upload POST request to ${uploadUrlWithFile}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:2955 · File type combined with upload action — agent may exfiltrate local data files…lse }, "description": "Auto-detect Node.js build settings from a package.json inside an archive already on the server.\n\nUse this before calling `Start Node.js Build` to preview what settings will be used,\nor to let the user review and o…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:2907 · File type combined with upload action — agent may exfiltrate local data files"description": "Application root directory (where package.json is located) relative to public_html.\nOmit it, or send \".\", for public_html itself."Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈72,067 tok
22 files · 80 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

9 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim hostinger: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  4. Cross-server tool reference≈ +4 on the totalNamespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
  5. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  6. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to Docker MCP Catalog, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim hostingerPropose a patch to the maintainer