44
/ 100
14 days ago
glama

cv-forge

An MCP server that analyzes job postings and generates tailored, ATS-friendly CVs, cover letters, and email templates in multiple formats including PDF.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical, 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies1 critical1 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalmd-to-pdf@5.2.4GHSA-547r-qmjm-8hvw

md-to-pdf vulnerable to arbitrary JavaScript code execution when parsing front matter

high@modelcontextprotocol/sdk@1.0.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

lowmarkdown-it@14.1.0GHSA-38c4-r59v-3vqw

markdown-it is has a Regular Expression Denial of Service (ReDoS)

lowmarkdown-it@14.1.0GHSA-6v5v-wf23-fmfq

markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configDEFAULT_OUTPUT_PATH"": "D:/CV",
configPDF_BASE_FONT_SIZE"": "12px",
configPDF_H1_FONT_SIZE"": "20px",
configPDF_H2_FONT_SIZE"": "15px",
configPDF_H3_FONT_SIZE"": "13px",
configPDF_LINE_HEIGHT"": "1.4",
configPDF_MARGIN_BOTTOM"": "10mm",
configPDF_MARGIN_LEFT"": "10mm",
configPDF_MARGIN_RIGHT"": "10mm",
configPDF_MARGIN_TOP"": "10mm",
configPDF_PAGE_SIZEpageSize (string, optional): PDF page size (e.g., 'A4', 'Letter', 'Legal') - uses env var if not provided
configPDF_PARAGRAPH_SPACING"": "8px",
configPDF_SECTION_SPACING"": "12px"
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/thechandanbhagat-cv-forge-l6jmlp)](https://m8ven.ai/mcp/thechandanbhagat-cv-forge-l6jmlp)
commit: a1cf021c34fce4d47e8c6fec1a1c1afbaa2112fa
code hash: 0b1be2e718fc7199027fd8e2d23b81fca6d318e2bce68df11d58e845f0c33049
verified: 7/17/2026, 8:31:35 AM
view raw JSON →