Is SuperCompress MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan34 source files scanned3/25
- Live reliabilityremote reachable in 247ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 2 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (3)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: … "prepack": "npm run sync:assets", "postinstall": "node bin/install.js" }, "dependenc…
- highShell command built from a string (injection risk)
exec.shell-concatsrc/setup.js: … (process.platform === "win32") { execSync(`start "" "${connectUrl}"`, { stdio: "ignore" }); …
Overall 71/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what SuperCompress does
- Serena MCP: the IDE for your agentA powerful toolkit for coding, providing semantic retrieval and editing capabilities.not reviewedWidely usedC
- Figma ContextGive your coding agent access to your Figma data. Implement designs in any framework in one-shot.not reviewedWidely usedB
- Mnemoverse MemoryHosted AI agent memory that learns from outcomes, with shared rooms, in Claude, Cursor and ChatGPT.not reviewedEstablishedA
