Icon Generator Ai MCP Server

This MCP server has multiple critical security issues that make it unsuitable for production use. The server relies on an external authentication middleware (auth_middleware) that is not included in the codebase and is loaded from a hardcoded path (~/clawd/meok-labs-engine/shared), creating an unverifiable trust boundary. Additionally, the code inserts this external path at the beginning of sys.path, which could allow path hijacking attacks. The rate limiting implementation is naive and offers no protection against distributed abuse. While the icon generation functionality itself is low-risk, the authentication and path handling issues are severe. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.