claude-prompts-mcp

const data = yaml.load(readFileSync(yamlPath, 'utf-8'));

Why

deserialises untrusted bytes into live objects

Fix

use json or yaml.safe_load

parsed = yaml.load(readFileSync(descriptorPath, 'utf8'));

Why

deserialises untrusted bytes into live objects

Fix

use json or yaml.safe_load

const manifest = yaml.load(readFileSync(path.join(dir, 'tool.yaml'), 'utf8')) as {

Why

deserialises untrusted bytes into live objects

Fix

use json or yaml.safe_load

const prompt = yaml.load(readFileSync(path.join(tool.promptDir, 'prompt.yaml'), 'utf8')) as {

Why

deserialises untrusted bytes into live objects

Fix

use json or yaml.safe_load

const parsed = yaml.load(readFileSync(file, 'utf8'));

Why

deserialises untrusted bytes into live objects

Fix

use json or yaml.safe_load

/^sh -c 'echo "[^"]*" >> \S+; export CLAUDE_PLUGIN_DATA="[^"]*"; exec (.*)'$/;

Why

evaluates text as code

Fix

remove; use a parser or a dispatch table

this.logger.info(`[Handoff] Minted token for session ${sessionId} (${session.chainId})`);

Why

No further detail recorded for this rule.

Fix

—

'    { "name": "red-team", "description": "Confirm exfil path" },  // Simple check',

Why

No further detail recorded for this rule.

Fix

—

const baseUrl = `http://127.0.0.1:${port}`;

Why

No further detail recorded for this rule.

Fix

—

await waitHealth(`http://127.0.0.1:${PORT_A}`);

Why

No further detail recorded for this rule.

Fix

—

await waitHealth(`http://127.0.0.1:${PORT_B}`);

Why

No further detail recorded for this rule.

Fix

—

const a = client(`http://127.0.0.1:${PORT_A}`);

Why

No further detail recorded for this rule.

Fix

—

const b = client(`http://127.0.0.1:${PORT_B}`);

Why

No further detail recorded for this rule.

Fix

—

Excerpt withheld: it is a secret, and we never print one.

Why

No further detail recorded for this rule.

Fix

—

sv-drop

Why

1 tool(s) can delete or overwrite

Fix

prefer a read-only mode or scoped tokens; the page states the blast radius

.ignore

Why

hidden member outside the usual dotfiles

Fix

review its purpose

.mcpbignore

Why

hidden member outside the usual dotfiles

Fix

review its purpose

.node-version

Why

hidden member outside the usual dotfiles

Fix

review its purpose

.prettierignore

Why

hidden member outside the usual dotfiles

Fix

review its purpose

.prettierrc.json

Why

hidden member outside the usual dotfiles

Fix

review its purpose

const rawDb = (engine as unknown as { db: { exec(sql: string): void } }).db;

Why

evaluates text as code

Fix

remove; use a parser or a dispatch table

return new Function(

Why

evaluates text as code

Fix

remove; use a parser or a dispatch table

.createHash("sha1")

Why

No further detail recorded for this rule.

Fix

—

const CLI = join(__dirname, '../../dist/cpm.js');

Why

No further detail recorded for this rule.

Fix

—

const CLI = join(__dirname, '../../dist/cpm.js');

Why

No further detail recorded for this rule.

Fix

—