Oathe Security Badge

Is mamertofabian/mcp-everything-search safe?

Yes. mamertofabian/mcp-everything-search is safe to install. Oathe's behavioral security audit gave the mcp-everything-search skill by mamertofabian a trust score of 90/100 with 3 findings, none critical or high. Report updated

https://github.com/mamertofabian/mcp-everything-search

90
SAFE

Is mamertofabian/mcp-everything-search safe to install?

This is a well-implemented, legitimate MCP server providing cross-platform file search capabilities using native system tools. The code quality is high with proper error handling and platform abstraction, though it carries inherent privacy considerations due to its file search functionality.

What security issues were found in mamertofabian/mcp-everything-search?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 80/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 85/100 · 5%

Findings (3)

MEDIUM File search functionality could access sensitive files -20 ▶

The MCP server provides cross-platform file search capabilities that could potentially be used to locate sensitive files like .env, SSH keys, or credentials. While this is the intended functionality of a search tool, it poses inherent privacy risks if misused.

LOW External DLL dependency for Windows functionality -10 ▶

Windows functionality requires the Everything SDK DLL (Everything64.dll) which must be obtained separately. While not inherently dangerous, external dependencies can introduce additional attack vectors.

LOW Inherent risks of search tool functionality -15 ▶

As a file search tool, this skill has inherent capability to access and index file system contents. While implemented legitimately, users should be aware that search functionality could be leveraged to discover sensitive information.

Should I install mamertofabian/mcp-everything-search?

Oathe's verdict for mamertofabian/mcp-everything-search is SAFE with a trust score of 90/100. Recommendation: Install.