Skills/npm/mcp-server

mcp-server@0.55.2

VERIFIED· install only

Publisher claims: "Model Context Protocol server transport: serve typed procedures as MCP tools to Claude and other MCP clients, with streaming progress, list_changed and an expose policy." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher procedures · publishing for 32 daysInstalls 26,609Last detonated 10 h ago
$claude mcp add mcp-server -- npx -y @procedures/mcp-server
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 88/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)dist/host.js:29 · MCP server using network transport (SSE/HTTP) — data sent over networkimport { McpServerTransport, distinctTools, httpEndpointOf, namedTools } from "./transport/mcp-transport.js";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/face.ts:41 · MCP server using network transport (SSE/HTTP) — data sent over networkexport interface McpFaceOptions extends Omit<McpServerTransportOptions, "transport" | "httpOptions" | "sdkTransport" | "stdio" | "sseOptions" | "registry"> {Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/types.ts:57 · MCP server using network transport (SSE/HTTP) — data sent over network* own (CLI-11): the owner of a listener mounts its request handler (`McpServerTransport.handleHttp`Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/face.d.ts:28 · MCP server using network transport (SSE/HTTP) — data sent over networkexport interface McpFaceOptions extends Omit<McpServerTransportOptions, "transport" | "httpOptions" | "sdkTransport" | "stdio" | "sseOptions" | "registry"> {Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/transport/mcp-transport.ts:212 · MCP server using network transport (SSE/HTTP) — data sent over networkexport function httpEndpointOf(transport: McpServerTransport): McpHttpTransport | undefined {Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/transport/mcp-transport.ts:209 · MCP server using network transport (SSE/HTTP) — data sent over networkconst httpEndpoints = new WeakMap<McpServerTransport, McpHttpTransport>();Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/index.d.ts:25 · MCP server using network transport (SSE/HTTP) — data sent over network…UntrustedWrapContext, UntrustedEnvelopes } from "./untrusted.js"; export type { McpServerTransportOptions, McpServerTransportState, SseTransportOptions, HttpTransportOptions, StdioTransportOptions, McpTextBlock, McpToolContent, McpToolCo…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/face.js:25 · MCP server using network transport (SSE/HTTP) — data sent over networkimport { McpServerTransport, httpEndpointOf } from "./transport/mcp-transport.js";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/host.ts:50 · MCP server using network transport (SSE/HTTP) — data sent over networkimport { McpServerTransport, distinctTools, httpEndpointOf, namedTools } from "./transport/mcp-transport.js";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/types.d.ts:50 · MCP server using network transport (SSE/HTTP) — data sent over network* own (CLI-11): the owner of a listener mounts its request handler (`McpServerTransport.handleHttp`Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actiondist/transport/mcp-transport.js:732 · File type combined with upload action — agent may exfiltrate local data filesthis.log("The input of stdio ended");Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)dist/transport/mcp-transport.d.ts:28 · MCP server using network transport (SSE/HTTP) — data sent over networkexport declare function httpEndpointOf(transport: McpServerTransport): McpHttpTransport | undefined;Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/face.ts:37 · MCP server using network transport (SSE/HTTP) — data sent over networkimport { McpServerTransport, httpEndpointOf } from "./transport/mcp-transport.js";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actionsrc/transport/mcp-transport.ts:830 · File type combined with upload action — agent may exfiltrate local data filesthis.log("The input of stdio ended");Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈71 tok
1 file · 59 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for @procedures/mcp-server@0.55.2 as of 10 h ago. This is the package itself, not its dependencies.