Skills/npm/dev-mcp

dev-mcp@0.4.0

VERIFIED

Publisher claims: "SketchXFlow delivery team: pull client requirements, post updates, log time, move milestones." Observed in sandbox: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Registry npm (MCP server) · listed in the official MCP RegistryPublisher sketchxflow · publishing for 148 daysInstalls 0Last detonated 1 h ago
$claude mcp add dev-mcp -- npx -y @sketchxflow/dev-mcp
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
SKETCHXFLOW_API_KEYSKETCHXFLOW_DEV_CREDENTIALSConfiguration, not credentials: MCP_PUBLIC_URL, PRM_PATH, SKETCHXFLOW_API_URL, SKETCHXFLOW_SKIP_UPDATE_CHECK
Where it talks to
sketchxflow.com (its own)
What the honeypot saw
no credential files read · reached only registry.npmjs.org
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard. It asks for SKETCHXFLOW_API_KEY, SKETCHXFLOW_DEV_CREDENTIALS and talks to sketchxflow.com. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.

$vet-skills run --secrets SKETCHXFLOW_API_KEY=sketchxflow.com,SKETCHXFLOW_DEV_CREDENTIALS=sketchxflow.com -- npx -y @sketchxflow/dev-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-15 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 27 s · 2 scenarios
t+CategoryObserved action
0.0sprocessno install scripts in bundle
6.7sprocessdependency install exit 0
27sfilesystemread ~/.sketchxflow/dev-mcp.json outside project
27snetworkCONNECT tcp://registry.npmjs.org:443
27sclaimed9 tools: sketchxflow_dev_login, sketchxflow_dev_logout, sketchxflow_dev_version, sketchxflow_dev_work, sketchxflow_dev_pull, sketchxflow_dev_update, sketchxflow_dev_message, sketchxflow_dev_log_time, sketchxflow_dev_milestone
27stools6b5c05889160f747
27stoolsb466fd93a4fa35a1
27stools5b18e98f30144fff
27stoolsf87d9e3ef8302f39
27stoolsafebe4e95ca175fa
27stoolsd8238c40e84fff66
27stoolsb1cee48aebe5edd9
27stools7bee9b113f4ac78d
27stools87a81eb3a2a260ff
27sprocessscript backend runs setup only
27sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packagedist/auth.js:4 · npx invocation of non-well-known package — may execute untrusted code* No key to paste: `sketchxflow_dev_login` (or `npx @sketchxflow/dev-mcp login`)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/client.js:35 · npx invocation of non-well-known package — may execute untrusted codereturn "Not signed in. Call sketchxflow_dev_login (or run `npx @sketchxflow/dev-mcp login`).";Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.js:5 · npx invocation of non-well-known package — may execute untrusted code* npx -y @sketchxflow/dev-mcp → run the MCP server (stdio)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/version.js:71 · npx invocation of non-well-known package — may execute untrusted code…} is published; this is ${info.current}. Restart your MCP client to pick it up (npx fetches the latest), or set the args to ["-y", "${PACKAGE_NAME}@latest"].`; } Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.js:69 · npx invocation of non-well-known package — may execute untrusted codelog("not signed in — the agent can call sketchxflow_dev_login, or run `npx @sketchxflow/dev-mcp login`.");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.js:6 · npx invocation of non-well-known package — may execute untrusted code* npx -y @sketchxflow/dev-mcp login → sign this machine in (browser approval)Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.js:7 · npx invocation of non-well-known package — may execute untrusted code* npx -y @sketchxflow/dev-mcp logout | whoamiFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈87 tok
1 file · 10 in bundle
Tool list per prompt
≈980 tok
9 tools · 109 per tool
Handshake
577 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 167

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @sketchxflow/dev-mcp@0.4.0 as of 45 min ago. This is the package itself, not its dependencies.