Skip to content
Dustin's AI Lab
Go back

Have Claude scan an MCP before you install it—it found 7 vulnerabilities and still said it's safe to install

This week AgentCrew Academy shipped a video about why you should run /security-scan before installing any MCP / npm / pip package. Tested a third-party MCP, Claude flagged 7 findings, then said "install is fine." This is the written companion to the video.

This post has been merged into Your AI Tools Are Now the Attack Vector. All of the original content lives there now, and that’s the only copy that gets updated.


3-month 1-on-1 AI coaching

A prompt handbook written around your own work, two 2-hour 1-on-1 sessions, and DMs answered for three months. At the end you rerun the whole workflow yourself.

See what the program includes

Or book a free 15-minute diagnosis first

Share this post on:
Previous Post
Gemini 3.5 Flash on Reddit: 3x the Price, Worse Vision, Tool Calling Broken
Next Post
Scope Discipline: five rules—client small talk ≠ scope expansion authorization, must go into every future contract