claude-code-skill

Security check static checks

34 out of 100

Reads what is published about the server: package advisories, licence, secrets in the documented setup and tool permissions. Nothing is installed or run, so this is not a security assessment. Checked 24 Oct 2026 by edna-skill-static-v1 main@b983a3b8106b. What it checks

• High MCP TypeScript SDK: Experimental tasks were not tied to the session that created them (affects @modelcontextprotocol/sdk 1.29.0, pinned in package-lock.json).
• High MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation (affects @modelcontextprotocol/sdk 1.29.0, pinned in package-lock.json).
• High MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server (affects @modelcontextprotocol/sdk 1.29.0, pinned in package-lock.json).
• High axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy` (affects axios 1.14.0, pinned in package-lock.json).
• High axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Header Injection via Prototype Pollution (affects axios 1.14.0, pinned in package-lock.json).
• High Allocation of Resources Without Limits or Throttling in Axios (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking (affects axios 1.14.0, pinned in package-lock.json).
• High Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0 (affects axios 1.14.0, pinned in package-lock.json).
• High Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking (affects axios 1.14.0, pinned in package-lock.json).
• High body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body (affects body-parser 1.20.4, pinned in mcp-server/package-lock.json).
• High body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body (affects body-parser 2.2.2, pinned in package-lock.json).
• High brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• High brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• High brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• High brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• High brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• High Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) (affects browserslist 4.28.2, pinned in web/package-lock.json).
• High Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM (affects browserslist 4.28.2, pinned in web/package-lock.json).
• Medium @hono/node-server: Middleware bypass via repeated slashes in serveStatic (affects @hono/node-server 1.19.12, pinned in package-lock.json).
• Medium Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) (affects @hono/node-server 1.19.12, pinned in package-lock.json).
• Medium MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies (affects @modelcontextprotocol/sdk 1.29.0, pinned in package-lock.json).
• Medium MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service (affects @modelcontextprotocol/sdk 1.29.0, pinned in package-lock.json).
• Medium OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation (affects @opentelemetry/core 1.30.1, pinned in package-lock.json).
• Medium Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver` (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Excessive recursion in formDataToJSON can cause denial of service (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0 (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: unbounded recursion in toFormData causes DoS via deeply nested request data (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Nested axios option objects can consume polluted prototype values (affects axios 1.14.0, pinned in package-lock.json).
• Medium axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Header Injection via Inherited headers After Minimal Interceptor (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength` (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: no_proxy bypass via IP alias allows SSRF (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Prototype pollution gadgets can alter axios request construction (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: HTTP/2 streamed uploads bypass `maxBodyLength` (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Deep formToJSON Key Recursion Can Cause Denial of Service (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: HTTP adapter streamed responses bypass maxContentLength (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Prototype pollution gadget in fetch adapter can alter outbound requests (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy (affects axios 1.14.0, pinned in package-lock.json).
• Medium Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion (affects axios 1.14.0, pinned in package-lock.json).
• Medium baseline-browser-mapping process termination on invalid input causes denial of service (affects baseline-browser-mapping 2.10.12, pinned in web/package-lock.json).
• Medium brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (affects brace-expansion 1.1.13, pinned in web/package-lock.json).
• Medium brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (affects brace-expansion 2.0.3, pinned in web/package-lock.json).
• Medium brace-expansion: Large numeric range defeats documented `max` DoS protection (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• Medium brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (affects brace-expansion 5.0.5, pinned in web/package-lock.json).
• Low Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams (affects axios 1.14.0, pinned in package-lock.json).
• Low body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement (affects body-parser 1.20.4, pinned in mcp-server/package-lock.json).
• Low body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement (affects body-parser 2.2.2, pinned in package-lock.json).
• Low jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch (affects diff 7.0.0, pinned in package-lock.json).
• Low esbuild allows arbitrary file read when running the development server on Windows (affects esbuild 0.27.4, pinned in mcp-server/package-lock.json).
• Low Sends data to a host outside the well-known APIs (to an address set at run time): docker/Dockerfile, src/bridge/bridgeApi.ts, line 81, 6 places in all.
• Low Tells the agent to skip permission or approval prompts: Skill.md, line 152.
• Note 2081 files were not read (over 512 KB, or past the 60 file cap): src/main.tsx, src/screens/REPL.tsx, src/server/web/public/terminal.js and more.
• Note 481 more dependencies were not looked up (over 400 a skill).