The Agent Skills Directory

REMOTE_CODE_EXECUTION (HIGH): The file examples/stdio-server.json contains a configuration for the filesystem server that uses npx -y @modelcontextprotocol/server-filesystem. The -y flag forces the automatic download and execution of the package from the npm registry without user confirmation.
COMMAND_EXECUTION (HIGH): examples/stdio-server.json defines multiple tools that execute shell commands on the host system. This includes executing a JavaScript file via a variable path (${CLAUDE_PLUGIN_ROOT}/servers/db-server.js) and running a Python module (python -m my_mcp_server). These configurations allow the agent to launch arbitrary subprocesses defined in the JSON.
DATA_EXFILTRATION (LOW): The filesystem tool grants the agent read/write access to the local directory ${CLAUDE_PROJECT_DIR}. While this is the intended purpose of the Model Context Protocol filesystem server, it establishes a broad access surface for potentially sensitive local data.

MCP Integration