Back to Home
mateusluizfb icon

plain-bytecode-analyzer-mcp

by mateusluizfb

Overview

Analyzes JVM bytecode from specified classes to identify performance optimizations and suggest improvements.

Installation

Run Command
node index.js

Security Notes

CRITICAL: The server uses `child_process.execSync` to run `find` and `javap` commands, directly embedding user-provided `cwd` and `className` into the shell command string. This is a severe command injection vulnerability, allowing an attacker to execute arbitrary shell commands on the system where the server is running. For example, a malicious `className` like `'; rm -rf /'` could be catastrophic. This is highly unsafe.

Similar Servers

Stats

Interest Score0
Security Score1
Cost ClassHigh
Avg Tokens5000
Stars0
Forks0
Last Update2025-11-26

Tags

JVMBytecode AnalysisPerformance OptimizationStatic AnalysisDeveloper Tool