MCP audit rule · v0.1.0
npx package without a version
npx fetches whatever is newest at launch, so a compromised or buggy release runs on your machine the next time the client starts.
- each server checks
- 3 test fixtures
medium npx-unpinned
Flagged
5 "args": [
6 "-y",
7 > "@modelcontextprotocol/server-filesystem",
8 "/tmp"
9 ]Fix
Pin an exact version: "args": ["-y", "@modelcontextprotocol/server-filesystem@2025.8.21", "/path"].
Fine
{
"mcpServers": {
"s": {
"command": "npx",
"args": [
"-y",
"@modelcontextprotocol/server-filesystem@2025.8.21",
"/tmp"
]
}
}
}