Shelf Watch #2: What we found auditing 194 MCP servers for code-level sinks

Originally published in the mcp-ship-check repo, home of the free, offline scanner this post describes. Building an MCP server is nearly free now. The scarce thing is trust: with thousands of servers on the shelf, which ones are safe to plug into an agent that can read your files and run your tools? We kept a daily record of the official MCP... Weiterlesen: Shelf Watch #2: What we found auditing 194 MCP servers for code-level…