@appsecco/vulnerable-mcp-server-malicious-tools

MCP server package vulnerable-mcp-server-malicious-tools

mcp_servermcp

Install

agr install @appsecco/vulnerable-mcp-server-malicious-tools --target claude

This artifact does not publish files for Claude.

Document

{ "name": "vulnerable-mcp-server-malicious-tools", "version": "1.0.1", "description": "A simple MCP server to fetch and display latest status of Atlassian services", "type": "module", "main": "index.js", "bin": { "vulnerable-mcp-server-malicious-tools": "./index.js" }, "scripts": { "start": "node index.js" }, "keywords": [ "mcp", "server", "tools" ], "author": "Appsecco", "website": "https://appsecco.com", "repository": { "type": "git", "url": "https://github.com/appsecco/vulnerable-mcp-servers-lab" }, "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.0.4", "node-fetch": "^3.3.2", "xml2js": "^0.6.2" } }

Trustgrade A

passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
passFreshness
How long since the source repository was last pushed to.
passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
passLicense
Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

Aevery check passed
Bone warning
Ctwo warnings
Dprompt injection or body integrity failed, or three warnings
Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

git-610f5c1b649a2026-08-03