mcp@10.6.3

VERIFIED

Publisher claims: "MCP server that serves knowledge about your components based on your Storybook stories and documentation" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher storybook · joined 0 days agoInstalls 8.5MLast detonated 2 h ago

$claude mcp add mcp -- npx -y @storybook/mcp

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagedist/index.js:123 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:301 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04