Is Vidlens MCP server safe?
Not recommended.
Hidden from default browsing. Significant findings or unreachable.
What to know before installing
- highShell command built from a string (injection risk)
How Vidlens compares
Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 42/100
- higher than 6% of 1,337 Media servers
- Tools that change things
- 10%
- typical: 4%. Fewer write tools means less an agent can break
What its tools let an agent do: 38 read · 4 create · 4 change · 3 delete
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan133 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 35 days ago12/15
- Maintainer identityregistry namespace matches repository owner6/10
Findings (3)
- mediumnpm install lifecycle script present
install.script - highShell command built from a string (injection risk)
exec.shell-concatdist/lib/cli-runtime.js: …_process"); execSync(`npm install -g ${pkgName}`, { stdio: "inherit" }); … - mediumnpm install lifecycle script present
install.scriptpackage.json: …t && node dist/cli.js update-deps", "postinstall": "node -e \"console.log('\\nVidLens MCP …
Overall 42/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Safer options for the same job
- BeatDesignLocal-first open-source AI media workbench with Canvas, video editor, Assets, and MCP tools.not reviewedGrowingB
- transcript1Transcribe YouTube, TikTok, Instagram, X and 7 more social media platforms, or audio/video files.not reviewedGrowingA
OpenshortsTurn long videos into viral vertical shorts and publish them to TikTok, Instagram and YouTube.not reviewedEstablishedA