Is Mcp safe to install?

SaferSkills independently audited Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md1.7 KB · Markdown

Uplink MCP Server

Automate a real, logged-in browser on your own device — no stored credentials, no bot detection.

Uplink drives a real device you pair (your phone or laptop), inside its real, logged-in browser session. Unlike headless automation, there are no stored credentials and nothing for a site's bot detection to flag — it's a real user's real session.

npm: @uplink-code/mcp
Registry name: build.uplink/uplink
Docs: https://docs.uplink.build

Install

Add to any MCP client (Claude Code, Cursor, Claude Desktop, …):

{
  "mcpServers": {
    "uplink": {
      "command": "npx",
      "args": ["-y", "@uplink-code/mcp"]
    }
  }
}

Claude Code one-liner:

claude mcp add uplink -- npx -y @uplink-code/mcp

Authenticate

The server reads credentials written by the Uplink CLI. Sign in once:

npx @uplink-code/cli login

Use

Ask your AI client to connect — it returns a pairing link.
Open the link on your device in the Uplink Connect app to pair.
The model drives the page in your live session and observes the real network traffic, DOM, and console.

See the quickstart for the full workflow and SDK reference.

Mcp— agent skill

Is Mcp safe to install?

Uplink MCP Server

Install

Authenticate

Use

License

Audit the pieces. Scan the whole. Decide.