@wonderwhy-er/desktop-commander

MCPattested

v0.2.52io.github.wonderwhy-erMITUpdated 13d agonpm GitHub

MCP server for terminal commands, file operations, and process management

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build

A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.

338kDownloads/wk

10kGitHub stars

1kForks

13d agoLast update

Package

Authorio.github.wonderwhy-er

LicenseMIT

Version0.2.52

Sourcenpm+mcp-registry

npm@wonderwhy-er/desktop-commander

GitHubwonderwhy-er/DesktopCommanderMCP

SBOMCycloneDX 1.6 ↓

Trust Status

B

65/100Good

✓Listed in Forge index+10/10

✓Identity verified · attested build+20/20

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓npm Trusted Publishing (Sigstore)+5/5

—npm maintainer match+0/5

→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)

✓CVE scan · clean+30/30

—Static analysis · clean+0/20

→ Suspicious install scripts or obfuscated code detected

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusIdentity verified

PublisherUnverified

SignatureUnsigned

Domain—

Provenance✓ Sigstore-verified · 7bad545

Dependencies60 resolved · 2 with advisories

Tool surface26 tools · 5 privileged

Security scan⚠ Warnings (4)v0.2.52 · todayHow well does this scan work?

CHANGEdep-vulns-increasedVulnerable dependencies went from 0 to 2 since v0.2.43

HIGHsharp@0.34.5sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 HIGHsharp@0.34.5sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545 HIGHsharp@0.34.5sharp : Vulnerability in librsvg dependency CVE-2026-96889 MODERATEuuid@8.3.2uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided · transitive

EvalsNone

IndexedJun 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

26 tools · 5 privileged

Statically extracted from the published packagev0.2.52 · 7h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

get_configNo description published

This tool published no description. Forge does not invent one.

set_config_valueNo description published

This tool published no description. Forge does not invent one.

read_fileNo description published

This tool published no description. Forge does not invent one.

read_multiple_filesNo description published

This tool published no description. Forge does not invent one.

write_fileprivilegedNo description published

This tool published no description. Forge does not invent one.

write_pdfprivilegedNo description published

This tool published no description. Forge does not invent one.

create_directoryNo description published

This tool published no description. Forge does not invent one.

list_directoryNo description published

This tool published no description. Forge does not invent one.

move_fileprivilegedNo description published

This tool published no description. Forge does not invent one.

start_searchNo description published

This tool published no description. Forge does not invent one.

get_more_search_resultsNo description published

This tool published no description. Forge does not invent one.

stop_searchNo description published

This tool published no description. Forge does not invent one.

list_searchesNo description published

This tool published no description. Forge does not invent one.

get_file_infoNo description published

This tool published no description. Forge does not invent one.

edit_blockprivilegedNo description published

This tool published no description. Forge does not invent one.

start_processNo description published

This tool published no description. Forge does not invent one.

read_process_outputNo description published

This tool published no description. Forge does not invent one.

interact_with_processNo description published

This tool published no description. Forge does not invent one.

force_terminateNo description published

This tool published no description. Forge does not invent one.

list_sessionsNo description published

This tool published no description. Forge does not invent one.

list_processesNo description published

This tool published no description. Forge does not invent one.

kill_processprivilegedNo description published

This tool published no description. Forge does not invent one.

get_usage_statsNo description published

This tool published no description. Forge does not invent one.

get_recent_tool_callsNo description published

This tool published no description. Forge does not invent one.

give_feedback_to_desktop_commanderNo description published

This tool published no description. Forge does not invent one.

get_promptsNo description published

This tool published no description. Forge does not invent one.

0 of 26 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for terminal commands, file operations, and process management

Keywords

mcp

Alternatives

Comparing tool surfaces…

Tools exposed

26 tools · 5 privileged · observed 2026-10-12 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-12 — observed resolution, not a publisher declaration.

60 packages resolved · 34 direct · 2 carrying advisories Resolution stops at depth 4 and 60 packages.

zod3.25.76
glob10.5.0+6 not drawn
open10.2.0+4 not drawn
sharp0.34.5HIGH GHSA-f88m-g3jw-g9cj HIGH GHSA-rgj7-g3m4-5g8c HIGH GHSA-wq5f-xc86-pv6w+3 not drawn
unpdf1.8.1
pizzip3.3.0+1 not drawn
remark15.0.1+2 not drawn2 dependencies
- unified11.0.5incomplete+1 not drawn
- remark-parse11.0.0incomplete
exceljs4.4.0+8 not drawn1 dependency
- uuid8.3.2MODERATE GHSA-w5hq-g745-h8pq
pdf-lib1.17.1+4 not drawn
unified11.0.5incompleteshown above+1 not drawn
file-type21.3.4incomplete
md-to-pdf5.2.5incomplete
@tiptap/pm3.31.4incomplete
remark-gfm4.0.1incomplete
cross-fetch4.1.0incomplete
markdown-it14.3.2incomplete
@tiptap/core3.31.4
highlight.js11.12.0
isbinaryfile5.0.7
remark-parse11.0.0incompleteshown above
@vscode/ripgrep1.18.0incomplete
proper-lockfile4.1.2incomplete
tiptap-markdown0.9.0incomplete
+11 not drawn

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

167 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 167

@pdf-lib/upng ^1.0.1 — required by pdf-lib@1.17.1package cap reached
pako ^1.0.11 — required by pdf-lib@1.17.1package cap reached
tslib ^1.11.1 — required by pdf-lib@1.17.1package cap reached
@types/unist ^3.0.0 — required by unified@11.0.5package cap reached
bail ^2.0.0 — required by unified@11.0.5package cap reached
devlop ^1.0.0 — required by unified@11.0.5package cap reached
extend ^3.0.0 — required by unified@11.0.5package cap reached
is-plain-obj ^4.0.0 — required by unified@11.0.5package cap reached
trough ^2.0.0 — required by unified@11.0.5package cap reached
vfile ^6.0.0 — required by unified@11.0.5package cap reached
strtok3 ^10.3.4 — required by file-type@21.3.4package cap reached
token-types ^6.1.1 — required by file-type@21.3.4package cap reached

+155 more not listed. The counts by reason above cover all of them.

Not followed: optionalDependencies, peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.