A mcp server to allow LLMS gain context about shadcn ui component structure,usage and installation,compaitable with react,svelte 5,vue & React Native
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in Jpisnice/shadcn-ui-mcp-server
transport stdio · http · sse counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 45d615f · analyzer v17 · 1h ago
danger signals1
- dynamic code executionnew Function()Jpisnice-shadcn-ui-mcp-server-45d615f/src/tools/tweakcn/fetch-presets.ts:92
const obj = new Function(`return (${sanitized})`)();
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 4
- fs Jpisnice-shadcn-ui-mcp-server-45d615f/scripts/bump-version.js :3
import fs from 'fs'; - fs Jpisnice-shadcn-ui-mcp-server-45d615f/src/resources/tweakcn/get-theme-metadata.ts :1
import fs from 'fs'; - fs Jpisnice-shadcn-ui-mcp-server-45d615f/src/tools/tweakcn/fetch-presets.ts :2
import fs from "fs"; - fs Jpisnice-shadcn-ui-mcp-server-45d615f/src/tools/tweakcn/locate-and-write.ts :1
import fs from "fs";
shell / exec 1
- shell Jpisnice-shadcn-ui-mcp-server-45d615f/scripts/bump-version.js :5
import { execSync } from 'child_process';
network 5
- net Jpisnice-shadcn-ui-mcp-server-45d615f/src/tools/tweakcn/fetch-presets.ts :1
import axios from "axios"; - net Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-react-native.ts :1
import { Axios } from "axios"; - net Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-svelte.ts :1
import { Axios } from "axios"; - net Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-vue.ts :1
import { Axios } from "axios" - net Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios.ts :1
import { Axios } from "axios";
secrets 5
- secrets Jpisnice-shadcn-ui-mcp-server-45d615f/src/cli/args.ts :18
} else if (process.env.GITHUB_PERSONAL_ACCESS_TOKEN) { - secrets Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-react-native.ts :19
...(process.env.GITHUB_PERSONAL_ACCESS_TOKEN && { - secrets Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-svelte.ts :18
...(process.env.GITHUB_PERSONAL_ACCESS_TOKEN && { - secrets Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios-vue.ts :44
...(process.env.GITHUB_PERSONAL_ACCESS_TOKEN && { - secrets Jpisnice-shadcn-ui-mcp-server-45d615f/src/utils/axios.ts :29
...(process.env.GITHUB_PERSONAL_ACCESS_TOKEN && {
declared dependencies 16
- @modelcontextprotocol/sdk@^1.24.0
- axios@^1.15.0
- cheerio@^1.0.0
- cors@^2.8.5
- express@^4.21.2
- joi@^17.13.3
- uuid@^10.0.0
- winston@^3.15.0
- zod@^3.24.2
- @types/cors@^2.8.17
- @types/express@^5.0.1
- @types/node@^22.10.5
- @types/uuid@^10.0.0
- license-checker@^25.0.1
- snyk@^1.1300.1
- typescript@^5.7.2