Registry/ESLint MCP Server

ESLint MCP Server

v0.3.8

Verified

MCP server for ESLint

Apache-2.0

other

338stars

100.7Kdownloads

47forks

Scanned Jul 13, 2026

Website Repository GITHUB

F0%

Scanned 6d ago

Critical Issues

Vulnerabilities Found

18Crit

191High

60Med

0Low

0Info

Security ScoreF

out of 100

Vulnerabilities Found

Crit

191

High

Medi

Low

Info

Last scanned: 7/13/2026

Quality ScoreC

out of 100

Maint.

Popular

Docs

Compat

Maintenance67%

Popularity77%

Documentation20%

Compatibility67%

Maintenance67

Unknown

Commit Frequency65%

Release Frequency70%

Issue Response65%

Popularity77

338

Stars

100.7K

Downloads

Forks

Stars Score71%

Downloads Score90%

Forks Score59%

Documentation20

README Quality20%

Available Documentation

API DocsExamplesChangelog

Compatibility67

MCP Spec Compliance80%

Transport Support50%

Features

TypeScript

Agentic MCP Risk Intelligence

MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.

agentic findings

No advanced MCP issues detected

The current scan did not find prompt-injection, agent command, exfiltration, unbounded filesystem, or MCP SSRF patterns.

Prompt Injection Surface

Tool metadata can steer or hijack AI clients before a user invokes the tool.

AI → Command Execution

Model-selected tool arguments can reach shell/process execution.

Secret Exfiltration Path

Tool context combines credential access with outbound network capability.

Unbounded Filesystem

AI-controlled paths may access files outside the intended workspace.

Agent SSRF

AI-controlled URLs may reach local, metadata, or internal network services.

Vulnerabilities(269)

18Critical

191High

60Medium

Filter:

README

No README available for this server.

View repository

Embed Security Badge

Add this badge to your README or documentation

Badge Type

Style

[![ESLint MCP Server MCPSafe Security](https://api.mcpsafe.org
/api/badge/eslint-mcp-2.svg)](https://mcpsafe.org/registry/eslint-mcp-2)

Need more customization options?Badge Documentation

Server Information

Source: GITHUB
Package: @eslint/mcp
Version: 0.3.8
License: Apache-2.0
Added: Jan 27, 2026
Updated: Jul 13, 2026

Actions

Compare with other servers Request rescan

ESLint MCP Server

Security ScoreF

Vulnerabilities Found

Quality ScoreC

Maintenance67

Popularity77

Documentation20

Available Documentation

Compatibility67

Features

Agentic MCP Risk Intelligence

Vulnerabilities(269)

Hardcoded Credentials Detected

Hardcoded Credentials Detected

API Key Exposed in Source Code

API Key Exposed in Source Code

API Key Exposed in Source Code

API Key Exposed in Source Code

child_process.exec() with User Input

child_process.exec() with User Input

child_process.exec() with User Input

Potential Command Injection

child_process.exec() with User Input

child_process.exec() with User Input

child_process.exec() with User Input

Potential Command Injection

Potential Command Injection

Potential Command Injection

API Key Exposed in Source Code

API Key Exposed in Source Code

Insecure Transport Configuration

Potential Typosquatting Package Name

fs Operation with User-Controlled Path

Recursive Merge Function Vulnerable to Prototype Pollution

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

Potential DNS Rebinding Vulnerability

Recursive Merge Function Vulnerable to Prototype Pollution

Recursive Merge Function Vulnerable to Prototype Pollution

Prototype Pollution via Path Assignment

fs Operation with User-Controlled Path

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

Potential DNS Rebinding Vulnerability

Potential DNS Rebinding Vulnerability

Potential DNS Rebinding Vulnerability

Potential DNS Rebinding Vulnerability

Potential DNS Rebinding Vulnerability

Potential DNS Rebinding Vulnerability

Recursive Merge Function Vulnerable to Prototype Pollution

Prototype Pollution via Path Assignment

Prototype Pollution via Path Assignment

Prototype Pollution via Path Assignment

Prototype Pollution via Path Assignment

Prototype Pollution via Path Assignment

Insecure Transport Configuration

Insecure Transport Configuration

Insecure Transport Configuration

Insecure Transport Configuration

Insecure Transport Configuration

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

User-Controlled Regular Expression Pattern