Skills/npm/peeptrend-mcp

peeptrend-mcp@0.1.2

VERIFIED

Publisher claims: "Find rising Steam games and YouTube content opportunities before the niche gets crowded." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server) · listed in the official MCP RegistryPublisher peeptrend · publishing for 143 daysInstalls 0Last detonated 31 h ago
$claude mcp add peeptrend-mcp -- npx -y peeptrend-mcp
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
PEEPTREND_API_KEYConfiguration, not credentials: PEEPTREND_API_BASE_URL, PEEPTREND_USER_AGENT, PEEPTREND_WEBSITE_BASE_URL
Where it talks to
peeptrend.com (its own)
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard. It asks for PEEPTREND_API_KEY and talks to peeptrend.com. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.

$vet-skills run --secrets PEEPTREND_API_KEY=peeptrend.com -- npx -y peeptrend-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-13 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 27 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
7.0sprocessdependency install exit 0
27sclaimed13 tools: get_peeptrend_connection_status, check_youtube_channel_name, check_youtube_title, check_youtube_shelf_saturation, check_gaming_niche, check_steam_update_opportunity, check_small_youtuber_game_fit, check_game_for_youtube, find_youtube_gaming_opportunities, get_opportunity_detail, generate_creator_ideas, save_opportunity_workflow, send_opportunity_feedback
27stoolsb9a0ed3a65e51dd8
27stools5f2d43d41f178535
27stools780c3e9f77d27776
27stools22cdcb8ca26bef73
27stoolsbdad62a49aded5ad
27stools630af4e799106669
27stools0971e6a018fa791c
27stoolsc59075b250ddb42a
27stoolsc6c2937f9deee1d1
27stoolsfe1080bed868396d
27stools6b86aa4dce79e3d1
27stoolsbe685e2193b5a446
27stools921ee46e72fad752
27sprocessscript backend runs setup only
27sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packagedist/cli.js:42 · npx invocation of non-well-known package — may execute untrusted code" codex mcp add peeptrend --env PEEPTREND_API_KEY=pt_key_from_profile -- npx -y peeptrend-mcp",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/cli.js:63 · npx invocation of non-well-known package — may execute untrusted code" npx -y peeptrend-mcp --doctor",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/cli.js:47 · npx invocation of non-well-known package — may execute untrusted code" claude mcp add peeptrend -e PEEPTREND_API_KEY=pt_key_from_profile -- npx -y peeptrend-mcp",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/cli.js:65 · npx invocation of non-well-known package — may execute untrusted code" npx -y peeptrend-mcp --stdio",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/cli.js:64 · npx invocation of non-well-known package — may execute untrusted code" npx -y peeptrend-mcp --help",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈1,879 tok
3 files · 29 in bundle
Tool list per prompt
≈1,496 tok
13 tools · 115 per tool
Handshake
598 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 102

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for peeptrend-mcp@0.1.2 as of 31 h ago. This is the package itself, not its dependencies.