npm JavaScript analyzed 3.9.0

claude-all-config

v3.9.0
npm

🦾 MONSTER ENGINEER v2 - Ultimate AI CLI with 63 Skills, 12 Superpowers, 14 Agents. Multi-Agent Orchestration, Cost-Aware, Security Scorecard, Parallel-First.

maintainer
zesbe
licence
MIT
first seen
2026-06-02
last seen
2026-09-16
releases · 30d
0
short id

claude-all-config is an MCP server distributed on npm, maintained by zesbe, tracked here since June 2026. It has shipped 67 releases (currently 3.9.0) and exposes 15 tools. Tools include browserstack_get_browsers, browserstack_get_builds, browserstack_get_logs, browserstack_get_plan, browserstack_get_session, browserstack_get_sessions, and 9 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict. 1 known CVE on file.

what we found

1 advisory published against this server still applies to the version it ships, the most severe rated none, most recently 2026-05-19.

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 15 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 15
  • browserstack_get_browsers
  • browserstack_get_builds
  • browserstack_get_logs
  • browserstack_get_plan
  • browserstack_get_session
  • browserstack_get_sessions
  • browserstack_update_session
  • testrail_add_case
  • testrail_add_result
  • testrail_add_run
  • testrail_get_cases
  • testrail_get_projects
  • testrail_get_results
  • testrail_get_suites
  • testrail_update_case
release cadence · 90d 0 releases

No releases yet.

recent releases last 10
version date src
3.9.0 2026-05-15 npm
3.8.4 2026-05-15 npm
3.8.3 2026-05-15 npm
3.8.2 2026-05-14 npm
3.8.1 2026-05-14 npm
3.8.0 2026-05-14 npm
3.7.7 2026-05-14 npm
3.7.6 2026-05-14 npm
3.7.5 2026-05-14 npm
3.7.4 2026-05-14 npm

view all →