Is Cdpilot MCP server safe?

Yes, with the usual care.

B74/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high

Code scan3 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

highShell command built from a string (injection risk)exec.shell-concat

bin/cdpilot.js: …n bin; } else { try { execSync(`which ${bin} 2>/dev/null`, { stdio: 'pipe' }); …

Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

FableCut
Zero-dependency browser video editor AI agents drive via a JSON timeline over MCP; ffmpeg export.
not reviewed
Established
A
Public Browser
Chrome over CDP for AI agents. Blind benchmark vs agent-browser: -33% tokens, -33% cost, -32% time
not reviewed
Growing
A
SeleniumBase MCP
Stealthy browser automation, testing, and web-scraping via CDP Mode.
not reviewed
Widely used
A