Skills/npm/hostinger-api-mcp

hostinger-api-mcp@4.0.1

CAUTION· startup only

Publisher claims: "MCP server for Hostinger API" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher hostinger · publishing for 582 daysInstalls 1MLast detonated 23 h ago
What would fix thisWatchDispute verdict

Coverage

Startup only; authenticated tool behavior not tested.
Tested
server startup over stdio (initialize sent) · every file read, file written and host contacted by what ran
Not tested
the tool list (the server exited before answering) · what the tools do when called with real credentials

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
API_TOKENAPITOKENAUTH_KEYAUTHORIZE_PATHHOSTINGER_API_TOKENOAUTH_ISSUERREST_AUTH_KEYTOKEN_PATHConfiguration, not credentials: API_BASE_URL, API_HEADERS, CALLBACK_PATH, MCP_PROJECT_DIR, ProgramData, ProgramFiles, REGISTER_PATH, REVOKE_PATH, SystemDrive, SystemRoot, USER_AGENT
Where it talks to
no vendor host named in the codeAlso hostinger.com, mcpservers.org, unsplash.com, wordpress.org, ipify.org, monarx.com — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
the tool list (the server exited before answering) · what the tools do when called with real credentials

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names hostinger.com, mcpservers.org, unsplash.com, wordpress.org, ipify.org, monarx.com as well as its own vendor. The guard injects API_TOKEN, APITOKEN, AUTH_KEY, AUTHORIZE_PATH, HOSTINGER_API_TOKEN, OAUTH_ISSUER, REST_AUTH_KEY, TOKEN_PATH only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- npx -y hostinger-api-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; startup only; authenticated tool behavior not tested) on 2026-11-13 and scored it 71/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Access to sensitive file paths; Cross-server tool reference. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 28 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
7.7sprocessdependency install exit 0
28sclaimedstartup only: exited (0) before answering · code: 'ERR_MODULE_NOT_FOUND', url: 'file:///tmp/ks-detonate-lTNxsM/task/home/work/acme-api/.claude/skills/hostinger-api-mcp/src/core/tools/all.js' } Node.js v22.23.5
28sprocessscript backend runs setup only
28sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathssrc/core/instructions.ts:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/instructions.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Cross-server tool referencesrc/core/skills.js:70 · Cross-server tool reference — agent may chain tools across untrusted MCP servers…ch the Hostinger MCP server + OAuth sign-in), then route to the matching coding-tool skill under tools/ so MCP tools and skills are available before the build steps run. Triggers: connect to Hostinger, set up the Hostinger connector, start…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
HIGH
Access to sensitive file pathssrc/core/runtime.js:448 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:472 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (['.env', '.envrc', '.netrc', '.git-credentials', '.pgpass', '.npmrc', '.hostinger.yaml', 'credentials.json', 'auth.json', '.my.cnf', '.pypirc', '.vault-token'].includes(name)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.js:438 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif (['.env', '.envrc', '.netrc', '.git-credentials', '.pgpass', '.npmrc', '.hostinger.yaml', 'credentials.json', 'auth.json', '.my.cnf', '.pypirc', '.vault-token'].includes(name)) {Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.js:435 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Env files (examples such as .env.example are kept), credentials and private keys: a deploy would serve themFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Destructive file system command detectedsrc/core/skills.ts:84 · Destructive file system command detected…ostinger-mcp-$V.tgz\" -C \"$D\" --strip-components=2 package/skills/headless && rm \"$D/hostinger-mcp-$V.tgz\"; }; } \\\n && echo \"$D/headless\" )\n```\n\n```powe…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:469 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Env files (examples such as .env.example are kept), credentials and private keys: a deploy would serve themFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/skills.ts:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files… packs the directory (honouring `.gitignore`; skipping `node_modules`, `.git`, `.env` files, credentials and private keys, and listing symlinks it does not follow),…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/instructions.agency-hosting.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/runtime.ts:482 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesreturn name.startsWith('.env.') && !['.env.example', '.env.sample', '.env.template', '.env.dist'].includes(name);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Destructive file system command detectedsrc/core/skills.js:70 · Destructive file system command detected…ostinger-mcp-$V.tgz\" -C \"$D\" --strip-components=2 package/skills/headless && rm \"$D/hostinger-mcp-$V.tgz\"; }; } \\\n && echo \"$D/headless\" )\n```\n\n```powe…Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathssrc/core/instructions.agency-hosting.ts:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…e passwords or API tokens into source code, client-side JavaScript or committed .env files.\n- Node.js apps read them from environment variables: set the full set w…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/skills.js:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files… packs the directory (honouring `.gitignore`; skipping `node_modules`, `.git`, `.env` files, credentials and private keys, and listing symlinks it does not follow),…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstypes.d.ts:5237 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesvalues taken from the project `.env` file or the user prompt.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Cross-server tool referencesrc/core/skills.ts:84 · Cross-server tool reference — agent may chain tools across untrusted MCP servers…ch the Hostinger MCP server + OAuth sign-in), then route to the matching coding-tool skill under tools/ so MCP tools and skills are available before the build steps run. Triggers: connect to Hostinger, set up the Hostinger connector, start…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packagebuild.js:19 · npx invocation of non-well-known package — may execute untrusted codeexec('npx tsc', (error, stdout, stderr) => {Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…referred; it is archived for you, skipping node_modules, .git and secret files (.env, keys, credentials), but not reading .gitignore, so keep build output out) or a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstypes.d.ts:5206 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesthe full desired set with real values taken from the project `.env` file or the userFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:3092 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…est. Always send the full desired set with real\nvalues taken from the project `.env` file or the user prompt.", "method": "PUT", "path": "/api/hosting/v1/a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:3056 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…at request; send\nthe full desired set with real values taken from the project `.env` file or the user\nprompt instead.", "method": "GET", "path": "/api/hos…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:3037 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…at request; send\nthe full desired set with real values taken from the project `.env` file or the user\nprompt instead.", "method": "GET", "path": "/api/hos…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:40 · npx invocation of non-well-known package — may execute untrusted code"start:ts": "npx tsc && node dist/src/servers/all.js"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathstypes.d.ts:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…referred; it is archived for you, skipping node_modules, .git and secret files (.env, keys, credentials), but not reading .gitignore, so keep build output out) or a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.ts:94 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…referred; it is archived for you, skipping node_modules, .git and secret files (.env, keys, credentials), but not reading .gitignore, so keep build output out) or a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathssrc/core/tools/hosting.js:3073 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files…est. Always send the full desired set with real\nvalues taken from the project `.env` file or the user prompt.", "method": "PUT", "path": "/api/hosting/v1/a…Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.ts:77 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/oauth.js:88 · npx invocation of non-well-known package — may execute untrusted code// Keeps the absolute PATH entries outside any node_modules folder. npx run in a project puts itsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.js:63 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.js:119 · MCP server using network transport (SSE/HTTP) — data sent over network… so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOSTINGER_API_TOKEN` in this file when you want OAuth: leave the token unset so\nOAuth can run:\n\…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/skills.ts:84 · File type combined with upload action — agent may exfiltrate local data files…SION`: its line 1 is the skills version this run uses, which goes into\n`connect.json` (Phase 3).\n\n### Run the bootstrap\n\nRun the bundled script. It verifies the MCP server and handles sign-in, emitting one JSON event per line on stdou…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.js:70 · File type combined with upload action — agent may exfiltrate local data files…SION`: its line 1 is the skills version this run uses, which goes into\n`connect.json` (Phase 3).\n\n### Run the bootstrap\n\nRun the bundled script. It verifies the MCP server and handles sign-in, emitting one JSON event per line on stdou…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:77 · File type combined with upload action — agent may exfiltrate local data files… | `connect/SKILL.md` → `connect/tools/<tool>.md` | `connect.json` | no |\n| 1 | **check state** — where does this domain stand? resume / switch / start over | `steps/01-check-state/SKILL.md` | `state.json` | no |\n| 2 | **refine** — disco…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.js:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/skills.ts:61 · File type combined with upload action — agent may exfiltrate local data files…r before the first deploy to a site that already has content. A `.hostinger/site.json` that came with the project (committed to Git, or in a cloned or downloaded project) is not an earlier deploy: whoever wrote it chose the domain, so conf…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.js:63 · File type combined with upload action — agent may exfiltrate local data files… | `connect/SKILL.md` → `connect/tools/<tool>.md` | `connect.json` | no |\n| 1 | **check state** — where does this domain stand? resume / switch / start over | `steps/01-check-state/SKILL.md` | `state.json` | no |\n| 2 | **refine** — disco…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.js:590 · File type combined with upload action — agent may exfiltrate local data filesthis.log('debug', `Making pre-upload POST request to ${uploadUrlWithFile}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.ts:84 · npx invocation of non-well-known package — may execute untrusted code…staller put the skill here** (you read this file from disk, from a folder that `npx skills\n add` or a Claude Code or Cursor plugin installed): that folder is `<skill>`. U…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:581 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Failed to fetch upload credentials: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/oauth.ts:91 · npx invocation of non-well-known package — may execute untrusted code// Keeps the absolute PATH entries outside any node_modules folder. npx run in a project puts itsFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/skills.js:77 · File type combined with upload action — agent may exfiltrate local data files…, '.config');\n const credsPath = path.join(base, 'hostinger-mcp', 'credentials.json');\n if (existsSync(credsPath)) {\n try {\n const creds = JSON.parse(readFileSync(credsPath, 'utf8'));\n if (creds.refresh_token || (creds.access_token &&…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:133 · File type combined with upload action — agent may exfiltrate local data files…tep 3.\n\nIf either is missing, register the missing server(s) in `~/.cursor/mcp.json` (global, so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOS…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:2888 · File type combined with upload action — agent may exfiltrate local data files"description": "Application root directory (where package.json is located) relative to public_html.\nOmit it, or send \".\", for public_html itself."Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packageskills/headless/SKILL.md:157 · npx invocation of non-well-known package — may execute untrusted code….json`, you are running a stale/legacy skill copy — stop and update the skill (`npx skills update` or the plugin update for an installed skill, or connect's Phase 1 npm i…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/skills.js:47 · File type combined with upload action — agent may exfiltrate local data files…r before the first deploy to a site that already has content. A `.hostinger/site.json` that came with the project (committed to Git, or in a cloned or downloaded project) is not an earlier deploy: whoever wrote it chose the domain, so conf…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:647 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', 'Pre-upload POST request failed - Full Response Details:', {Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.js:506 · File type combined with upload action — agent may exfiltrate local data filesthis.log('warning', 'Upload credentials request failed, retrying: ' + error.message);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:63 · File type combined with upload action — agent may exfiltrate local data files… for the site (when none are stored, they are detected from the branch's package.json; pass appType, nodeVersion, outputDirectory, buildScript or entryFile to override them). Git needs GitHub or GitLa…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/skills.js:70 · npx invocation of non-well-known package — may execute untrusted code…staller put the skill here** (you read this file from disk, from a folder that `npx skills\n add` or a Claude Code or Cursor plugin installed): that folder is `<skill>`. U…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/runtime.ts:2755 · npx invocation of non-well-known package — may execute untrusted code// The headless skill's launcher starts this server from the home folder (npx run in the project wouldFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/runtime.js:547 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Failed to fetch upload credentials: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.js:607 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', 'Pre-upload POST request failed - Full Response Details:', {Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/skills.ts:91 · File type combined with upload action — agent may exfiltrate local data files…, '.config');\n const credsPath = path.join(base, 'hostinger-mcp', 'credentials.json');\n if (existsSync(credsPath)) {\n try {\n const creds = JSON.parse(readFileSync(credsPath, 'utf8'));\n if (creds.refresh_token || (creds.access_token &&…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.agency-hosting.ts:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; export default instructions; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagesrc/core/runtime.js:2692 · npx invocation of non-well-known package — may execute untrusted code// The headless skill's launcher starts this server from the home folder (npx run in the project wouldFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.ts:133 · MCP server using network transport (SSE/HTTP) — data sent over network… so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOSTINGER_API_TOKEN` in this file when you want OAuth: leave the token unset so\nOAuth can run:\n\…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:656 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Pre-upload POST request failed: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:2907 · File type combined with upload action — agent may exfiltrate local data files"description": "Application root directory (where package.json is located) relative to public_html.\nOmit it, or send \".\", for public_html itself."Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:540 · File type combined with upload action — agent may exfiltrate local data filesthis.log('warning', 'Upload credentials request failed, retrying: ' + error.message);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.agency-hosting.js:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.ts:84 · MCP server using network transport (SSE/HTTP) — data sent over network…check-state without waiting for a reply.\n\n\n## Reference Sources\n\n- https://mcpservers.org/servers/hostinger/api-mcp-server\n- https://www.hostinger.com/connector\n" }, { "uri": "skill://host…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packagesrc/core/instructions.ts:2 · npx invocation of non-well-known package — may execute untrusted code…t needs no API token.\n\nFor end-to-end site builds install the headless skill: npx skills add hostinger/api-mcp-server"; export default instructions; Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.js:2936 · File type combined with upload action — agent may exfiltrate local data files…lse }, "description": "Auto-detect Node.js build settings from a package.json inside an archive already on the server.\n\nUse this before calling `Start Node.js Build` to preview what settings will be used,\nor to let the user review and o…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.ts:630 · File type combined with upload action — agent may exfiltrate local data filesthis.log('debug', `Making pre-upload POST request to ${uploadUrlWithFile}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/runtime.js:616 · File type combined with upload action — agent may exfiltrate local data filesthis.log('error', `Pre-upload POST request failed: ${errorMessage}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/core/skills.js:70 · MCP server using network transport (SSE/HTTP) — data sent over network…check-state without waiting for a reply.\n\n\n## Reference Sources\n\n- https://mcpservers.org/servers/hostinger/api-mcp-server\n- https://www.hostinger.com/connector\n" }, { "uri": "skill://host…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/core/skills.js:119 · File type combined with upload action — agent may exfiltrate local data files…tep 3.\n\nIf either is missing, register the missing server(s) in `~/.cursor/mcp.json` (global, so every project and every\nlater run has them). Merge them into any existing `mcpServers` rather than replacing the file.\n**Do not** put `HOS…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:82 · File type combined with upload action — agent may exfiltrate local data files… for the site (when none are stored, they are detected from the branch's package.json; pass appType, nodeVersion, outputDirectory, buildScript or entryFile to override them). Git needs GitHub or GitLa…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/core/tools/hosting.ts:2955 · File type combined with upload action — agent may exfiltrate local data files…lse }, "description": "Auto-detect Node.js build settings from a package.json inside an archive already on the server.\n\nUse this before calling `Start Node.js Build` to preview what settings will be used,\nor to let the user review and o…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actiontypes.d.ts:8 · File type combined with upload action — agent may exfiltrate local data files… for the site (when none are stored, they are detected from the branch's package.json; pass appType, nodeVersion, outputDirectory, buildScript or entryFile to override them). Git needs GitHub or GitLa…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈6,731 tok
1 file · 80 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for hostinger-api-mcp@4.0.1 as of 22 h ago. This is the package itself, not its dependencies.

What would make this Verified

9 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim hostinger: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. Cross-server tool reference≈ +4 on the totalNamespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
  4. Destructive file system command detected≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
  6. MCP server using network transport (SSE/HTTP)≈ +2 on the totalNamespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim hostingerPropose a patch to the maintainer