THRONE
See report Verify server

registry / record

github.com/notpoiu/roblox-executor-mcp

github / sealed 2026-06-29 / No. c56c0444

Does github.com/notpoiu/roblox-executor-mcp MCP work in Claude Code and Cursor? Throne executed github.com/notpoiu/roblox-executor-mcp mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: inconclusive. Is github.com/notpoiu/roblox-executor-mcp mcp safe? Static security scan: 17 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.

> throne registry github.com/notpoiu/roblox-executor-mcp sealed
This target couldn't be started as an MCP serverpnpm install failed (exit 1): [ERROR] This project is configured to use bun For help, run: pnpm help install
receiptsealed evidence
scan id
c56c0444b3474abca82397955cc57051
target
https://github.com/notpoiu/roblox-executor-mcp
sealed at
2026-06-29 05:14:24Z
evidence hash
sha256:8a0a809f2ade9bf8851e50729c593afa7d53242109c41230c121ab0f35279219
01connectFAIL0ms

server never launched: pnpm install failed (exit 1): [ERROR] This project is configured to use bun For help, run: pnpm help install

02discoverSKIPPED0ms

not run, server never launched

03validate_schemasSKIPPED0ms

not run, server never launched

04smoke_test_toolsSKIPPED0ms

not run, server never launched

05error_handlingSKIPPED0ms

not run, server never launched

06streamingSKIPPED0ms

not run, server never launched

07resource_lifecycleSKIPPED0ms

not run, server never launched

08concurrent_callsSKIPPED0ms

not run, server never launched

09reconnectSKIPPED0ms

not run, server never launched

01connectFAIL0ms

server never launched: pnpm install failed (exit 1): [ERROR] This project is configured to use bun For help, run: pnpm help install

02discoverSKIPPED0ms

not run, server never launched

03validate_schemasSKIPPED0ms

not run, server never launched

04smoke_test_toolsSKIPPED0ms

not run, server never launched

05error_handlingSKIPPED0ms

not run, server never launched

06streamingSKIPPED0ms

not run, server never launched

07resource_lifecycleSKIPPED0ms

not run, server never launched

08concurrent_callsSKIPPED0ms

not run, server never launched

09reconnectSKIPPED0ms

not run, server never launched

chatgpt desktop calibratingemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 17 finding(s) (8 high, 7 medium) / review recommended
HIGH/CRITICAL findings block clean ship. Review before shipping.
LOWTHR-INSTALL-03 / Install-time script execution (npm lifecycle)

"prepare" runs on git-dependency installs and local dev (not registry installs): 'bun run build'

roblox-executor-mcp-HEAD/package.json
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): 'binary, ["ip", "-4"], {'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1187
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'command, args, { stdio: ["pipe", "ignore", "pipe"], shell: false });'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1240
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): '"osascript", ["-e", `tell application "${escapeAppleScript(appName)}" to quit`],'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1473
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'launcher.command, launcher.args || [], {'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1517
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): '"osascript", ["-e", `application "${escapeAppleScript(appName)}" is running`], {'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1540
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'commandToRun, args, {'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1729
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'commandToRun, args, {'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1776
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): 'probe, [command], { stdio: "ignore", shell: false }).status === 0;'

roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:3313
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'file, commandArgs, { windowsHide: true, stdio });'

roblox-executor-mcp-HEAD/scripts/install-tailscale.mjs:32
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): 'bun, args, {'

roblox-executor-mcp-HEAD/scripts/run-with-bun.mjs:28
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): 'command.command, command.args, {'

roblox-executor-mcp-HEAD/scripts/run-with-bun.mjs:64
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawnSync() called with a dynamically built command (heuristic, review): 'candidate, ["--version"], {'

roblox-executor-mcp-HEAD/scripts/run-with-bun.mjs:113
HIGHTHR-EXEC-04 / Arbitrary command execution from tool arguments

spawn() called with a dynamically built command (heuristic, review): 'file, args, { windowsHide: true });'

roblox-executor-mcp-HEAD/src/http/routes/api/client-setup.ts:76
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

execSync() called with a dynamically built command (heuristic, review): ''

roblox-executor-mcp-HEAD/src/platform/windows-screenshot.ts:80
MEDIUMTHR-EXEC-04 / Arbitrary command execution from tool arguments

execSync() called with a dynamically built command (heuristic, review): ''

roblox-executor-mcp-HEAD/src/platform/windows-screenshot.ts:177
LOWTHR-NET-05 / Hardcoded outbound endpoints

7 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: aka.ms (roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:873), api.openai.com (roblox-executor-mcp-HEAD/scripts/dev-server.mjs:122), bun.com (roblox-executor-mcp-HEAD/scripts/run-with-bun.mjs:83), opencode.ai (roblox-executor-mcp-HEAD/scripts/install-harnesses.mjs:1621), pkgs.tailscale.com (roblox-executor-mcp-HEAD/scripts/install-tailscale.mjs:14), tailscale.com (roblox-executor-mcp-HEAD/scripts/dev-server.mjs:344), thumbnails.roblox.com (roblox-executor-mcp-HEAD/src/http/routes/api/avatar.ts:13)

roblox-executor-mcp-HEAD/scripts/dev-server.mjs:122
VERDICT: INCONCLUSIVESANDBOXED RUN, submitted server executed in a disposable microVM, compatibility not assessable: server never launched: pnpm install failed (exit 1): [ERROR] This project is configured to use bun For help, run: pnpm help install / security: review, 17 finding(s), 8 highsealed by THRONE / No. c56c0444 / 2026-06-29
scopeattestation tuple
target
https://github.com/notpoiu/roblox-executor-mcp github
engine
sandboxed
claude code
calibration: partial recorded=9,spec=0,assumed=9
cursor
calibration: partial recorded=11,spec=0,assumed=7
chatgpt desktop
calibration: unavailable recorded=0,spec=2,assumed=16
steps exercised
18 of 18
test suite
v1.0.0
security ruleset
v1.0.0
sealed at
2026-06-29 05:14:24Z
evidence hash
sha256:8a0a809f2ade9bf8851e50729c593afa7d53242109c41230c121ab0f35279219
valid until
2026-09-27
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.