Anthilll Inside — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Anthilll Inside (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
PoC MCP server for reproducing Anthropic hosted MCP client SSE response-size hangs.
The server uses @modelcontextprotocol/[email protected] with stateless StreamableHTTPServerTransport in default SSE mode (enableJsonResponse: false), matching the conditions described in the bug report. A single tool — generate_lipsum — returns a configurable number of pseudo-Latin sentences so you can bracket the suspected ~10–333 KiB threshold.
cp .env.example .env
npm install
npm run devThe MCP endpoint is http://127.0.0.1:3000/mcp.
generate_lipsumsentence_count | Approx. SSE response |
|---|---|
| 50 | ~8 KiB |
| 500 | ~55 KiB |
| 2000 | ~222 KiB |
| 3000 | ~333 KiB |
# Initialize + list tools (small SSE response)
curl -sS -X POST http://127.0.0.1:3000/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"curl","version":"1.0"}}}'
# Call generate_lipsum with 3000 sentences (~333 KiB SSE — matches bug report)
curl -sS -X POST http://127.0.0.1:3000/mcp \
-H 'Content-Type: application/json' \
-H 'Accept: application/json, text/event-stream' \
-d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"generate_lipsum","arguments":{"sentence_count":3000}}}'Set ENABLE_JSON_RESPONSE=true to serve Content-Type: application/json instead of SSE — the known workaround from the bug report.
This PoC logs everything useful for layer-by-layer debugging:
Server-side (Pino structured logs to stdout):
request_received / request_completed — per-request access log with reqId, responseBytes, durationMs, writableEndedjsonrpc_request_body — inbound JSON-RPC body (Bearer tokens redacted)mcp_request_dispatch — method, Accept header, transport modetool_invoked / lipsum_generated / tool_response_ready — tool lifecycle with byte countsClient-visible (MCP `notifications/message` via logging capability):
tool_start, lipsum_generated, tool_response_ready events with payloadBytes and toolReqIdNote: client-visible log notifications are only delivered in SSE mode; they are dropped when ENABLE_JSON_RESPONSE=true (SDK behavior).
docker build -t mcp-sse-repro .
docker run --rm -p 3000:3000 mcp-sse-reprodocker build -t your-registry/mcp-sse-repro:latest .
docker push your-registry/mcp-sse-repro:latest
helm upgrade --install mcp-sse-repro ./helm/mcp-sse-repro \
--set image.repository=your-registry/mcp-sse-repro \
--set image.tag=latest \
--set ingress.enabled=true \
--set ingress.hosts[0].host=mcp.example.com \
--set env.ALLOWED_HOSTS=mcp.example.comWhen deploying behind an ingress, set ALLOWED_HOSTS to your public hostname for DNS rebinding protection.
| Variable | Default | Description |
|---|---|---|
PORT | 3000 | HTTP listen port |
HOST | 127.0.0.1 | Bind address (0.0.0.0 in container/K8s) |
ALLOWED_HOSTS | — | Comma-separated allowed Host headers |
ENABLE_JSON_RESPONSE | false | true = JSON workaround; false = SSE repro |
LOG_LEVEL | debug | Pino log level |
LOG_REQUEST_BODY | true | Log inbound JSON-RPC bodies |
LOG_RESPONSE_BODY_PREVIEW_BYTES | 2048 | Max bytes of request body to log |
MAX_SENTENCE_COUNT | 10000 | Upper bound for sentence_count |
See anthropic-mcp-sse-bug-report.md for the full write-up with layer-by-layer evidence. File issues at anthropics/claude-ai-mcp.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.