cursor / cursor/community-plugins

Stale telemetry flag on open-agent-utility-index after switching to local stdio MCP

Open
#431 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
4k
Forks
671
Avg merge
3h 42m
Merged PRs (30d)
1

Description

Plugin: https://cursor.directory/plugins/open-agent-utility-index
Repo: https://github.com/sadri-dridi/open-agent-utility-index (public, 76a2335 on main)

The listing is stuck on a security-agent flag from the first scan, when the only component was a remote Worker URL. That report is now stale:

  • The plugin ships mcp-server.mjs, a local stdio MCP server (UTC clock, JSON check, URL shape, IANA zones). It does not open sockets.
  • mcp.json is type: stdio / node ${PLUGIN_ROOT}/mcp-server.mjs.
  • The Directory install payload was updated to that stdio config.
  • README, PRIVACY.md, SECURITY.md, LICENSE, and package.json homepage now point at GitHub, not workers.dev.

The plugin page still shows the old remote-proxy write-up and says it is hidden pending manual review. Self-serve Update Plugin succeeded and Verification requested is already set, but the banner did not refresh.

Could you clear the stale flag and re-run the scan against current main? Happy to delete/resubmit if that is easier.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by comparing the plugin listing and security-agent flag with the current main revision 76a2335, especially mcp-server.mjs, mcp.json, and the updated documentation and package metadata. Check the existing Update Plugin and Verification requested state, then re-run the scan against current main; done means the stale remote-proxy report and hidden banner are cleared.

Written by the indexing model from the issue text.

Assessment

Tech stack
nodejs, typescript
Domain
security, tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.