Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 2 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The Aryn MCP server requires absolute file paths to pdfs you want processed as inputs, so it works best when paired with an MCP server that can automatically manage files on your computer. Here is how to install one for Claude Desktop: inc_1 inc_2 inc_3 inc_4 inc_5
More documentation for the filesystem MCP server can be found here.
Instead of manually installing this MCP server, Claude Desktop allows for an easy one-click extension:
Download the extension: Retrieve the provided .dxt file from this repository, or download it for macos here and linux here.
Find the .dxt extension: Navigate to the folder where the file was downloaded and double click to install. Follow the installation steps when prompted
inc_9
Restart Claude Desktop
Now you're ready to go!
For more details, refer to the Claude Desktop Extensions documentation.
If you're manually installing this MCP server, you need to install uv first, which provides the uvx command. Install it here.
After installation, you'll have access to both uv and uvx commands. The uvx command is what you'll use to run this MCP server.
Next, add the following configuration to your MCP client config file
{
"mcpServers": {
"Aryn Local MCP Server": {
"command": "uvx",
"args": [
"aryn-mcp-server"
],
"env": {
"ARYN_API_KEY": "YOUR_ARYN_API_KEY",
"ARYN_MCP_OUTPUT_DIR": "<full path to directory where files will get saved (ie Users/username/Downloads)>"
}
}
}
}For client specific config implementation, see below:
If you encounter spawn uvx ENOENT errors:
which uvx in your terminal to find the correct path"command": "uvx" with "command": "<full path to uvx>"If you encounter file permissions errors, ensure that the path is expanded out and passed, MCP client tend to treat them as literal directory names. For specific issues:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.