github re-analysis due

modelcontextprotocol/ext-apps

Official repo for spec & SDK of MCP Apps protocol - standard for UIs embedded AI chatbots, served by MCP servers

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit ca1d298 · analyzer v17 · 4d ago

code evidence vv1.7.4 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs modelcontextprotocol-ext-apps-ca1d298/build.bun.ts :3 import { cpSync, mkdirSync } from "node:fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/bump-version.mjs :17 import { readFileSync } from "node:fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/check-versions.mjs :9 import { readFileSync, readdirSync, statSync, existsSync } from "fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/generate-schemas.ts :55 import { readFileSync, writeFileSync } from "node:fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/link-self.mjs :8 import { cpSync, existsSync, lstatSync } from "fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/run-bun.mjs :8 import { existsSync } from "fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/sync-snippets.ts :49 import { readFileSync, writeFileSync, readdirSync } from "node:fs";
fs modelcontextprotocol-ext-apps-ca1d298/scripts/typedoc-plugin-seo.mjs :11 import fs from "node:fs";
fs modelcontextprotocol-ext-apps-ca1d298/src/server/index.examples.ts :11 import * as fs from "node:fs/promises";
fs modelcontextprotocol-ext-apps-ca1d298/src/server/index.ts :303 * text: await fs.readFile("dist/view.html", "utf-8"),

shell modelcontextprotocol-ext-apps-ca1d298/scripts/bump-version.mjs :16 import { execSync } from "node:child_process";
shell modelcontextprotocol-ext-apps-ca1d298/scripts/run-bun.mjs :7 import { spawn } from "child_process";