roku-dev-studio
projectother official scan blockedio.github.paramount-engineering/roku-dev-studio · v
Cross-platform Electron desktop studio for Roku developers: remote control, device queries, sideload, telnet console, RALE/App Connector, BrightScript Fiddle, JSON Action Scripts, an `rds` CLI, an MCP server for AI agents, and an internet relay.
run it
blocked by the security scanBlocked by the security scanThe worker scanned github.com/paramount-engineering/roku-dev-studio at 218ae5638fdd for v with [email protected][email protected] on 2026-10-17, before building it, and found code that looks malicious: threat-filesystem-autostart in packages/roku-dev-studio-network-inspector/bpf-access-macos.ts:10, threat-runtime-keylogging in apps/roku-dev-studio/renderer/components/dev-app/screenshots.ts:285. It built nothing, and the hub offers no way to run this version: no package, no image, no build, no web service. An operator can look at the findings and let it run; a new version is scanned again.
connect to it
copy what your client needs{
"mcpServers": {
"roku-dev-studio": {
"command": "CHANGE_ME",
"args": []
}
}
}
#!/usr/bin/env bash # Registers every server with Claude Code (run once; `claude mcp list` to check). set -euo pipefail set -a; [ -f .env ] && source .env; set +a claude mcp add roku-dev-studio -- CHANGE_ME
{
"mcpServers": {
"roku-dev-studio": {
"command": "CHANGE_ME",
"args": []
}
}
}
{
"servers": {
"roku-dev-studio": {
"type": "stdio",
"command": "CHANGE_ME",
"args": []
}
}
}
name: my-agent target: local servers: - hub: io.github.paramount-engineering/roku-dev-studio
- not probed yet: tools unpinned, ingest lists them
- blocked: the worker's security scan of github.com/paramount-engineering/roku-dev-studio at 218ae5638fdd on v found code that looks malicious (threat-filesystem-autostart, threat-runtime-keylogging); nothing is deployed for it
tools
Probe result: faileddocker: security scan: github.com/paramount-engineering/roku-dev-studio at 218ae5638fdd has code that looks malicious: threat-filesystem-autostart in packages/roku-dev-studio-network-inspector/bpf-access-macos.ts:10, threat-runtime-keylogging in apps/roku-dev-studio/renderer/components/dev-app/screenshots.ts:285
runs · 1
the latest tests of this entry by the hub and its workers, newest first| date | worker | method | status | sandbox | reason |
|---|---|---|---|---|---|
| 2026-10-17 20:06 | local-mac-vm | docker | failed | gvisor | docker: security scan: github.com/paramount-engineering/roku-dev-studio at 218ae5638fdd has code that looks malicious: threat-filesystem-autostart in packages/r… |