Back to MCP Trust Indexm8ven
62
/ 100
1 month ago
glama

darkside-mcp

An MCP server that grants AI agents unrestricted file system, Python, and PowerShell access on Windows for real, unfiltered automation.

→ For-Sunny/darkside-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// known CVEs in dependencies3 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highglob@10.3.10GHSA-5j98-mcp5-4vw2

glob CLI: Command injection via -c/--cmd executes matches with shell:true

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALLOWED_DRIVES— "": "C,D",
configALLOWED_PATHS— 3. Start with allowed drives limited. Default is C,F. Maybe start with just your project folder using .
configPOWERSHELL_MAX_TIMEOUT— 600000 Max PowerShell timeout (10 min)
configPOWERSHELL_PATH— powershell.exe PowerShell executable
configPOWERSHELL_TIMEOUT— 60000 Default PowerShell timeout (ms)
configPYTHON_MAX_TIMEOUT— 300000 Max Python timeout (ms)
configPYTHON_PATH— python Python executable path
configPYTHON_TIMEOUT— 30000 Default Python timeout (ms)
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/for-sunny-darkside-mcp-ny8m8f)](https://m8ven.ai/mcp/for-sunny-darkside-mcp-ny8m8f)
commit: 48cbcb69a1e566c1dce313c4ac99391e0b57ba6a
code hash: e3ad148dc2191e5ef4072b1d35b277c2038502ebe16d7fe40a7df53f348fc4c8
verified: 6/22/2026, 12:43:50 PM
view raw JSON →