MCP Apps UI resource validator — detects ui:// resources, checks CSP, permissions, theming, and display modes.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 7b8fb14 · analyzer v33 · 3w ago
skills & prompt files 1
- agent-rules AgentProbe-mcp-apps-validator-7b8fb14/CLAUDE.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 18
filesystem 1
- fs (weak) AgentProbe-mcp-apps-validator-7b8fb14/tests/unit/code-conformance.test.mjs :1
import { readFileSync, readdirSync, existsSync, statSync } from 'node:fs'
network 1
- net AgentProbe-mcp-apps-validator-7b8fb14/src/task/McpAppsConnector.mjs :175
await fetch( endpoint, {
declared dependencies 2
- @modelcontextprotocol/sdk@^1.12.1
- jest@^30.0.5