slidev-mcp
by zerob13
Overview
An AI-powered server designed to generate and manage Slidev presentation slides and projects.
Installation
pnpm startSecurity Notes
CRITICAL: The `create-slidev-project` tool is highly vulnerable to command injection and path traversal. The `projectPath` argument, which comes directly from user input, is used unsanitized in `node:child_process.exec` (via `npx degit ... "${projectPath}"`) and `node:fs` operations. An attacker could inject arbitrary shell commands (e.g., `$(rm -rf /)` or remote code execution payloads) by manipulating `projectPath`. Additionally, path traversal with `../../` could lead to arbitrary file overwrites or creation outside the intended project directory.
Similar Servers
claude-prompts-mcp
Enhances AI assistant behavior through structured prompt management, multi-step chains, quality gates, and autonomous verification loops, primarily for development tasks.
mcp-server
A Node.js server implementing Model Context Protocol (MCP) for Webflow, enabling AI agents to interact with Webflow Data and Designer APIs.
slidev-mcp
AI-powered tool for generating professional online presentations using natural language descriptions, built on Slidev and large language models.
claude-faf-mcp
Optimizes AI understanding of software projects by providing persistent context, fixing context-drift, and enabling bi-directional synchronization between project metadata and AI documentation.