HighAI coding agentsBLWK-AI-008

Project MCP servers are set to auto-enable without prompting

What this means

enableAllProjectMcpServers / enabledMcpjsonServers auto-enabling a repo's MCP servers.

How to fix it

Remove enableAllProjectMcpServers / enabledMcpjsonServers from committed settings so a repo's own .mcp.json can't run servers before you've reviewed them (CVE-2025-59536).

Check it yourself

Run a scan and look for BLWK-AI-008 in the results:

bulwark scan
bulwark ai scan

Installed the standalone CLI package instead of the app? The command is bulwarkctl.

References

• CVE-2025-59536

Related checks

• Project-supplied agent hooks run shell commands automatically · BLWK-AI-002
• An agent permission allowlist permits arbitrary command execution · BLWK-AI-006
• An agent is configured to bypass all permission prompts · BLWK-AI-007
• VS Code chat auto-approve (“YOLO mode”) is enabled · BLWK-AI-009
• VS Code Workspace Trust is disabled · BLWK-AI-010
• A VS Code task runs automatically when the folder is opened · BLWK-AI-011