Skip to content

Latest commit

 

History

History
79 lines (51 loc) · 2.06 KB

File metadata and controls

79 lines (51 loc) · 2.06 KB

🟢 markview-markview

Native macOS markdown previewer with MCP server for Claude Code. Lets AI assistants preview markdown and open files in a native Swift app with GFM rendering, Mermaid diagrams, syntax highlighting, and Quick Look integration.

Install command: claude mcp add --transport stdio --scope user markview -- npx mcp-server-markview

Field Value
Grade A
Risk Score 8
Version smithery
Vendor Smithery
Source markview-markview
Scan Date 2026-04-19
Scanner tooltrust-scanner/v0.3.8

Findings Summary

Severity Count
Critical 0
High 0
Medium 2
Low 0
Info 2

Detailed Findings

🟡 🔑 AS-002 — Excessive Permission Surface

Severity: Medium

Description: tool declares fs permission

Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.


AS-014 — DEPENDENCY_INVENTORY_UNAVAILABLE

Severity: Info

Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

Recommendation: Review and remediate the identified issue.


🟡 🔑 AS-002 — Excessive Permission Surface

Severity: Medium

Description: tool declares fs permission

Recommendation: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.


AS-014 — DEPENDENCY_INVENTORY_UNAVAILABLE

Severity: Info

Description: Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

Recommendation: Review and remediate the identified issue.


Scored using ToolTrust methodology · Raw JSON report