.vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
mcp-name: io.github.ulebule/clipgrab
An MCP server that saves the image currently on the system clipboard to a file (PNG or JPG).
Many AI agents can read image files but cannot access the system clipboard. ClipGrab bridges that gap: copy an image (e.g. a screenshot), call the tool, and get back a path to a saved image on disk that the agent can open.
By default the image is saved to the current working directory — the folder the agent runs from.
requirements.txt): Pillow, mcp[cli]wl-clipboard (wl-paste) or xclip for the clipboard fallback.Run directly with uv (no install step):
uvx clipgrab-mcpOr install with pip:
pip install clipgrab-mcp
clipgrab-mcppython3 -m venv .venv
./.venv/bin/pip install -r requirements.txtsave_clipboard_image(directory?, filename?, image_format?) → saves theclipboard image and returns the absolute path.
directory — defaults to the current working directory (created if missing).Can also be set via the CLIPGRAB_DEFAULT_DIR environment variable.
filename — defaults to a timestamped name (clipboard-YYYYMMDD-HHMMSS).image_format — "png" (default) or "jpg".clipboard_has_image() → returns true/false../.venv/bin/python mcp_server.pyClipGrab ships as a VS Code extension that registers the MCP server automatically — it then appears under Extensions view → MCP Servers and starts on demand. On first use the extension creates its own Python virtual environment and installs the dependencies, so you only need Python 3.10+ on your PATH (configurable via the clipgrab.pythonPath setting).
Develop / try it:
F5 to launch the ExtensionDevelopment Host.
ClipGrab MCP server and itssave_clipboard_image tool are available.
Package a .vsix for sharing:
npm install -g @vscode/vsce
vsce packageA ready-to-use config lives in .vscode/mcp.json:
{
"servers": {
"clipgrab": {
"command": "/absolute/path/to/.venv/bin/python",
"args": ["/absolute/path/to/mcp_server.py"],
"cwd": "${workspaceFolder}"
}
}
}Then open .vscode/mcp.json and start the clipgrab server (or use the Command Palette → "MCP: List Servers").
Point any MCP client at the published PyPI package over stdio:
{
"servers": {
"clipgrab": {
"command": "uvx",
"args": ["clipgrab-mcp"]
}
}
}ClipGrab is described for registries by server.json and is published to the official MCP registry under the name io.github.ulebule/clipgrab.
ImageGrab.grabclipboard() (Windows /macOS, and Linux with a recent Pillow). On Linux it falls back to wl-paste / xclip.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.