MCPTriage
Metabase MCP server
github:metabase/metabase
Review
Capabilities a person should look at before installing.
Why
- Contains instructions placed where the agent reads them indirectly. in
.claude/skills/app-db-migrations/SKILL.md - Contains instructions placed where the agent reads them indirectly. in
.claude/skills/backend-module-conventions/SKILL.md - Contains instructions placed where the agent reads them indirectly. in
.claude/skills/e2e-test-create/SKILL.md - Contains a pattern that opens a remote shell or runs remote code. in
.github/actions/create-backport/create-backport-test.sh - Contains invisible or obfuscated characters. in
.github/scripts/eastwood-report.unit.spec.ts - Changes AI rules or configuration files. in
e2e/test/scenarios/models/reproductions-2.cy.spec.ts - Contains instructions placed where the agent reads them indirectly. in
LICENSE-EMBEDDING.txt - Asks the agent to list its tools, commands or reachable paths. in
dev/bot/common/environment-discovery.md - Contains text addressed only to AI readers. in
docs/ai/settings.md - Starts other processes and makes network requests. in
dev/email-preview/serve.ts - Starts other processes and makes network requests. in
e2e/runner/cypress-runner-utils.js - Starts other processes and makes network requests. in
e2e/support/helpers/e2e-custom-viz-dev-server-tasks.ts - Installs or updates packages at runtime by running a package manager. in
enterprise/frontend/src/custom-viz/src/cli.integration.spec.ts - Starts other processes and makes network requests. in
frontend/test/bench/measure.ts - Runs an install script when installed. in
package.json
GitHub archives have no registry checksum; the result is tied to the commit shown.
Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →