Loading npm security reports…
Universal MCP server for Roblox game control, reverse engineering, and exploitation — supports Claude Code, Claude Desktop, Cursor, Windsurf, and any MCP-compatible AI.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L37Package source invokes a package manager install command at runtime.
dist/cli.jsView on unpkg · L141Package source references dynamic require/import behavior.
dist/ws-server.jsView on unpkg · L2This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/process-manager.jsView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L37This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/process-manager.jsView on unpkgPackage source invokes a package manager install command at runtime.
dist/cli.jsView on unpkg · L141Package source references dynamic require/import behavior.
dist/ws-server.jsView on unpkg · L2