MCPSafe.io

Security pre-install checks for MCP servers.

Mostly safe — a couple of notes worth reading.

npm · xcodebuildmcp2.5.2

Scanned 5/12/2026, 8:58:34 AM·Cached result·Fast Scan·48 rules·View source ↗·How we decide ↗

AIVSS Score

2.3/ 10

Low

Severity Breakdown

critical

high

medium

low

MCP Server Information

Packagexcodebuildmcp

Version2.5.2

SourceNPM

LicenseMIT

Publishercamsoft

Package age1y 1m

Stars—

Downloads/wk125.2K

Dependencies11

Homepagehttps://www.xcodebuildmcp.com

Repositorygit+https://github.com/getsentry/XcodeBuildMCP.git

Findings

4 of 4 findings

medium (4)

4 findings

medium (4)

AIVSS 2.3CVSS 3.5

MCP tool input schema exposes an unconstrained string/any field with a risky name (command/query/sql/code/script/url/path/expr/ eval). Any caller can pass arbitrary values, which typically widens the tool's blast radius well beyond its intent. Narrow the schema with `.enum()`, `.regex()`, `.max()`, `Literal[...]`, Pydantic `Field(max_length=..., pattern=...)`, or a JSON Schema `enum` / `pattern` / `maxLength`.

Evidence

"category": {
          "enum": ["runtime", "validation", "schema"]
        },
        "code": {
          "type": "string",
          "minLength": 1
        }
      },
      "required": ["category", "code"]
    }

Remediation

Shape the schema to the tool's actual intent: - Zod: chain `.enum([...])`, `.regex(/.../)`, or `.max(n)`; prefer `z.enum([...])` or `z.literal(...)` when the value set is small. - Pydantic: use `Literal["a", "b"]` or `Field(max_length=..., pattern=r"...")`. - JSON Schema: add `"enum"`, `"pattern"`, or `"maxLength"` to the property. An overbroad schema is an "overpowered tool" — the model has nothing to prevent it from calling the tool with input far beyond what the tool's prose contract

Report false positive →

AIVSS 2.3CVSS 3.5

Evidence

"type": "object",
      "additionalProperties": false,
      "properties": {
        "path": {
          "type": "string"
        }
      },
      "required": [
        "path"

Remediation

Report false positive →

AIVSS 2.3CVSS 3.5

Evidence

"type": "object",
      "additionalProperties": false,
      "properties": {
        "command": {
          "type": "string"
        },
        "outputLines": {
          "type": "array",
          "items": {

Remediation

Report false positive →

AIVSS 2.3CVSS 3.5

Package declares an install-time hook (npm postinstall/preinstall/prepare, setup.py cmdclass override, custom setuptools install class, or non-default pyproject build-backend). Anyone installing this package runs the hook. Confirm the hook is necessary and review its contents; prefer shipping a plain library without install-time execution.

Evidence

"build:tsup": "npm run generate:version && tsup",
    "dev:tsup": "npm run build:tsup && tsup --watch",
    "run": "npm run build -s >/dev/null 2>&1 && node build/cli.js",
    "prepare": "node scripts/install-git-hooks.js",
    "hooks:install": "node scripts/install-git-hooks.js",
    "generate:version": "npx tsx scripts/generate-version.ts",
    "repro:mcp-lifecycle-leak": "npm run build && npx tsx scripts/repro-mcp-lifecycle-leak.ts",

Remediation

Prefer libraries that do not require install-time code execution: - Drop `postinstall`/`preinstall`/`prepare` scripts if the work can happen at runtime or build-time instead. - Ship pre-built native binaries rather than compiling via a custom `cmdclass` or `build_ext` override. - For Dockerfiles: replace `RUN curl … | sh` with a pinned download + checksum verification + explicit `RUN` of a named script. - If the hook is unavoidable, document exactly what it does so downstream reviewers

Report false positive →

LLM summary— xcodebuildmcp:2.5.2

This package receives a B grade with a safety score of 84/100 and scores 2.2/10 on the AIVSS scale, indicating moderate security posture with room for improvement. All four medium-severity findings relate to server configuration issues, which are generally addressable but should be reviewed before deployment. The absence of critical or high-severity vulnerabilities makes this reasonably safe to install, though you should address the configuration concerns based on your specific use case.

Signal scores

Static100

CVE check100

Publisher identity10

Permissions100

Supply chain92

Typosquat100

Package health100

Community82

Secrets & exfil100

Injection risks76

Destructive ops100

LLM judge panel

CVE check

No known CVEs found for this package or its dependencies.

Community trust

No community reports

Security policy: Not found
Advisories: 0

Scan details

Total findings: 4
Affected tools: 0 / 1
Scan type: Fast Scan
Rules run: 48
LLM consensus score: N/A
Scanned: 19h ago
Source: NPM

MCP Server Information

Source: NPM
Package: xcodebuildmcp
Version: 2.5.2
License: MIT
Publisher: camsoft
Verified: No
Added: 1y 1m ago
Versions: 76
Homepage: https://www.xcodebuildmcp.com
Repository: git+https://github.com/getsentry/XcodeBuildMCP.git
Ecosystem: Node.js / npm
Downloads/wk: 125.2K
Dependencies: 11

AIVSS Score

2.3/ 10Low

Internal score: 84/100

Severity breakdown

Scan Details

Total findings4

Affected tools0 / 1

Scanned19h ago

Scan modeFAST

SourceNPM

Scan IDpubfast34e22bd163644052ded9

Want deeper analysis?

Fast scan found 4 findings using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.

View plans Scan another package

Building your own MCP server?

Run this exact engine on your private repo — before users see it on /scan.

Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.

See plans with Private scans How private scans stay private

4 of 4 findings

medium (4)

4 findings

medium (4)

AIVSS 2.3CVSS 3.5

Evidence

"category": {
          "enum": ["runtime", "validation", "schema"]
        },
        "code": {
          "type": "string",
          "minLength": 1
        }
      },
      "required": ["category", "code"]
    }

Remediation

Report false positive →

AIVSS 2.3CVSS 3.5

Evidence

"type": "object",
      "additionalProperties": false,
      "properties": {
        "path": {
          "type": "string"
        }
      },
      "required": [
        "path"

Remediation

Report false positive →

AIVSS 2.3CVSS 3.5

Evidence

"type": "object",
      "additionalProperties": false,
      "properties": {
        "command": {
          "type": "string"
        },
        "outputLines": {
          "type": "array",
          "items": {

Remediation

Report false positive →

AIVSS 2.3CVSS 3.5

Evidence

"build:tsup": "npm run generate:version && tsup",
    "dev:tsup": "npm run build:tsup && tsup --watch",
    "run": "npm run build -s >/dev/null 2>&1 && node build/cli.js",
    "prepare": "node scripts/install-git-hooks.js",
    "hooks:install": "node scripts/install-git-hooks.js",
    "generate:version": "npx tsx scripts/generate-version.ts",
    "repro:mcp-lifecycle-leak": "npm run build && npx tsx scripts/repro-mcp-lifecycle-leak.ts",

Remediation

Report false positive →

241	"type": "object",
242	"additionalProperties": false,
243	"properties": {
244	"path": {
245	"type": "string"
246	}
247	},
248	"required": [
249	"path"

241	"type": "object",
242	"additionalProperties": false,
243	"properties": {
244	"path": {
245	"type": "string"
246	}
247	},
248	"required": [
249	"path"

29	"category": {
30	"enum": ["runtime", "validation", "schema"]
31	},
32	"code": {
33	"type": "string",
34	"minLength": 1
35	}
36	},
37	"required": ["category", "code"]
38	}

19	"build:tsup": "npm run generate:version && tsup",
20	"dev:tsup": "npm run build:tsup && tsup --watch",
21	"run": "npm run build -s >/dev/null 2>&1 && node build/cli.js",
22	"prepare": "node scripts/install-git-hooks.js",
23	"hooks:install": "node scripts/install-git-hooks.js",
24	"generate:version": "npx tsx scripts/generate-version.ts",
25	"repro:mcp-lifecycle-leak": "npm run build && npx tsx scripts/repro-mcp-lifecycle-leak.ts",