Security audit
Datawrapper
Security checks for vulnerabilities and agentic risk
Overview
This plugin transparently connects an assistant to Datawrapper so it can create, update, and publish charts using a user-provided API token.
Install this only if you are comfortable letting your assistant use a Datawrapper API token to create, update, and publish charts. Prefer a token with the narrowest permissions Datawrapper supports, and remember that the actual MCP server is executed through uvx from the external datawrapper-mcp package.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.