Faker Ai MCP Server

This MCP server has a critical security vulnerability: it imports and depends on an external authentication module (`auth_middleware`) from a hardcoded system path (`~/clawd/meok-labs-engine/shared`), which is not provided in the codebase and cannot be verified. This creates a significant supply chain risk where malicious code could be injected through that dependency. Additionally, the server implements rate limiting based on in-memory state that resets on restart, lacks input validation on the `locale` parameter, and has concerning path dependencies that bypass normal package management. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.