package claude-faf-mcp
Review
Grade C (Moderate risk signals). Inspect repository and permissions first.
- Latest version
- 7.1.0
- First published
- 14 months ago
- Maintainers
- 1
- Runs code at install
- postinstall
- Catalog grade
- C — Moderate risk signals
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
Threat reports
- Reportedclaude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Install it pinned and without install scripts:
npm install --ignore-scripts --save-exact "claude-faf-mcp"Based on public adoption and transparency signals as of Oct 24, 2026. Our opinion, not a code audit or security guarantee. Answers change through the day.