Agent Booster MCP Server

Agent Booster is a legitimate code indexing and token optimization tool with reasonable architecture, but contains several security concerns that warrant attention. The MCP server stores a shared secret in plaintext within configuration files, subprocess calls in hooks lack proper input sanitization in some cases, and the daemon infrastructure writes files with potentially overly permissive modes. While the tool's primary function (symbol indexing and semantic search) is sound, these implementation details pose moderate risk in multi-user or untrusted environments. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).

3 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.