Mcp Filesystem — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Filesystem (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A comprehensive Model Context Protocol (MCP) server providing advanced filesystem operations with intelligent features for AI-assisted development workflows.
.venv when detected.checkignore files + built-in patterns for clean structure viewsnpm install
npm run buildCreate .cursor/mcp.json in your project:
{
"mcpServers": {
"filesystem": {
"command": "node",
"args": [
"/absolute/path/to/dist/index.js"
],
"env": {}
}
}
}batch_readRead multiple files concurrently with automatic encoding detection.
{
projectPath: "C:/project",
relativePaths: ["src/index.ts", "package.json", "README.md"]
}Features:
[EMPTY] indicator)rename_fileSafely rename files with conflict detection.
{
projectPath: "C:/project",
currentPath: "src/oldname.js",
newName: "newname.js"
}Safety Features:
move_fileMove files with automatic directory creation.
{
projectPath: "C:/project",
sourcePath: "src/component.tsx",
destinationPath: "src/components/component.tsx"
}Features:
check_structureDisplay clean project structure with intelligent filtering.
{
projectPath: "C:/project"
}Smart Filtering:
.checkignore file support#### .checkignore Format
# Comments start with #
temp/
*.tmp
*.log
debug/run_commandExecute development commands with Python virtual environment auto-activation.
{
projectPath: "C:/project",
command: "npm test"
}Features:
.venv and activates automaticallyProhibited Commands:
cat, type, more, etc. → Use batch_readmv, move, ren → Use rename_file/move_filedir, ls, tree → Use check_structure// Check project structure
{ projectPath: "C:/python-project" }
// Read configuration files
{
projectPath: "C:/python-project",
relativePaths: ["requirements.txt", "setup.py", "src/main.py"]
}
// Run tests (auto-activates .venv)
{
projectPath: "C:/python-project",
command: "pytest tests/ -v"
}
// Install packages (in venv)
{
projectPath: "C:/python-project",
command: "pip install requests"
}// Build project
{
projectPath: "C:/node-project",
command: "npm run build"
}
// Run tests
{
projectPath: "C:/node-project",
command: "npm test"
}
// Lint code
{
projectPath: "C:/node-project",
command: "npx eslint src/ --fix"
}The server automatically detects Python virtual environments:
.venv\Scripts\activate.bat.venv/bin/activateWhen detected, all Python commands are executed within the virtual environment context.
All tools provide comprehensive error handling:
npm run buildnpm run dev # Build and startsrc/
├── index.ts # Main MCP server implementation
package.json # Dependencies and scripts
tsconfig.json # TypeScript configuration
.checkignore # Structure filtering patterns
README.md # This documentationMIT License
Contributions welcome! Please ensure all tools maintain the clean, focused output format and comprehensive error handling standards.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.