Skills/npm/grayboard-mcp-server

grayboard-mcp-server@0.5.4

VERIFIED

Publisher claims: "Grayboard MCP Server for Claude Code" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher weolbu · joined 0 days agoInstalls 687Last detonated 50 min ago
$claude mcp add grayboard-mcp-server -- npx -y @weolbu/grayboard-mcp-server
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-26 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
1.2sprocessdependency install exit 1
1.4sprocessexec /usr/bin/timeout
1.4sprocessexited 1: Node.js v22.23.4
1.4sclaimedno tools/list reply (exit 1)
1.4sprocessscript backend runs setup only

Static findings

MEDIUM
Unicode escape sequence detecteddist/editor-syntax.d.ts:8 · Unicode escape sequence detected — may contain obfuscated payloadsFix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07

No other findings across 2,190 lines in 45 files.