Deterministic SVG perception for LLM agents — measures, never guesses. MCP server.
Mirror renders SVG in a real browser and reports what is actually where — in grid cells and W3C color names, with prose and structured output — and it never guesses. Spatial layout constraints become unit tests. And every tool description is a claim the server proves about itself. Built for agents that can't afford to hallucinate coordinates. When an LLM agent edits an SVG, how does it know…
Abgeleitet aus den Transporten, die dieser Eintrag deklariert (stdio). Ein Client, der hier nicht steht, ist damit nicht ausgeschlossen — Forge kann ihn nur nicht bestätigen.
Contained to critical — not scanned yet — tool surface unknown. Known so far: runs on your machine.
At worst: Arbitrary execution, or execution together with a live credential. A compromise here is a compromise of the host or the account.
Started as a local process by your MCP client, which means it runs as you: your shell, your environment variables, your filesystem, your network.
not scanned yet — tool surface unknown. Nothing is known about what this entry can do, which is not the same as it being able to do little.
No credential declaration found, from the publisher, the upstream registry, or the README. That is an absence of evidence, not evidence this entry needs nothing.
Never scanned, so neither the install-time scripts nor the size of the dependency tree behind this entry has been read.
Blast radius measures what this entry can reach, not how likely it is to misbehave — that is the trust score, and the two are deliberately separate axes. A high blast radius is not a defect: a filesystem server is supposed to write files. It never moves the trust grade in either direction. How this is calculated →
Die Verifizierung bestätigt die Identität des Publishers (die Inhaberschaft am Repo), nicht die Sicherheit des Codes. Der Sicherheits-Scan deckt bekannte CVEs und verdächtige Installationsskripte ab.
Forge hat zu diesem Eintrag keinen Scan verzeichnet und hat daher keine Beobachtung seiner Tool-Oberfläche. Das ist das Fehlen eines Belegs, nicht der Beleg, dass er keine Tools offenlegt.
Mirror renders SVG in a real browser and reports what is actually where — in grid cells and W3C color names, with prose and structured output — and it never guesses. Spatial layout constraints become unit tests. And every tool description is a claim the server proves about itself. Built for agents that can't afford to hallucinate coordinates. When an LLM agent edits an SVG, how does it know whether the change worked? Today it either guesses from the source text (and hallucinates positions,…
Dieses Paket wurde noch nicht gescannt, daher wurde kein Abhängigkeitsbaum aufgelöst.