Security MCP server deps are not installed with extension...

Assessment

This issue has not been assessed yet.

Description

After installing the security extension the MCP server is not reachable...

Seems to be that the mcp sdk dep is not getting packaged with the extension?

[DEBUG] [MCP STDERR (securityServer)]:  node:internal/modules/package_json_reader:255
  throw new ERR_MODULE_NOT_FOUND(packageName, fileURLToPath(base), null);
        ^

Error [ERR_MODULE_NOT_FOUND]: Cannot find package '@modelcontextprotocol/sdk' imported from /Users/jackwoth/.gemini/extensions/gemini-cli-security/mcp-server/security.ts
    at Object.getPackageJSONURL (node:internal/modules/package_json_reader:255:9)
    at packageResolve (node:internal/modules/esm/resolve:767:81)
    at moduleResolve (node:internal/modules/esm/resolve:853:18)
    at defaultResolve (node:internal/modules/esm/resolve:983:11)
    at ModuleLoader.defaultResolve (node:internal/modules/esm/loader:801:12)
    at #cachedDefaultResolve (node:internal/modules/esm/loader:725:25)
    at ModuleLoader.resolve (node:internal/modules/esm/loader:708:38)
    at ModuleLoader.getModuleJobForImport (node:internal/modules/esm/loader:309:38)
    at #link (node:internal/modules/esm/module_job:201:49) {
  code: 'ERR_MODULE_NOT_FOUND'
}

Getting set up

First steps

1. Read the whole issue, then the project's contributing guide.
2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
3. Fork the repository and make your change on a branch.
4. Open a pull request that references the issue number.

More from gemini-cli-extensions/security

• fix(docs): documented dependency-scan command does not match the MCP prompt name

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 79/100

  gemini-cli-extensions/security#180 · Opened Nov 4, 2026

• fix(docs): distinguish dependency working directory from sandbox setup

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 72/100

  gemini-cli-extensions/security#179 · Opened Nov 3, 2026

• Help

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 10/100

  gemini-cli-extensions/security#177 · Opened Sep 24, 2026

• [Feature Request - Codemaps] Deduplicate Structural Graph Edges and Augment with Metadata (Call Sites)

  May be free again @satvikkk claimed this 261 days ago, and no pull request is open. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  enhancement

  gemini-cli-extensions/security#141 · 1 assignee · Opened Feb 16, 2026

• Broken workflow calling security analysis

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 3/5 1-2 days Newbie friendliness 45/100

  gemini-cli-extensions/security#133 · 3 comments · Opened Feb 4, 2026

All issues in gemini-cli-extensions/security

Similar issues

• fix(auth): Show the submitted email on reset confirmation

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 2/5 1-3 hours Newbie friendliness 78/100

  Open-Earth-Foundation/CityCatalyst#3399 · Opened Nov 5, 2026

  Maintainers usually reply within 2 days

• User Report: In Verrem 1.1.46, "Nunc autem 46 homines in specul

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  userReport

  Difficulty 1/5 Under an hour Newbie friendliness 72/100

  nkprasad12/morcus-net#631 · Opened Nov 5, 2026

  Maintainers usually reply within 1 day

• fix(app): fail closed if GetGeneralSetting fails during initialization

  Possibly taken @kalavt claimed this today. Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  bug

  Difficulty 2/5 1-3 hours Newbie friendliness 76/100

  kite-org/kite#777 · Opened Nov 5, 2026

  Maintainers usually reply within 1 day

• Linux full CI fails rustfmt import ordering in runner audit module

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel

  Difficulty 1/5 Under an hour Newbie friendliness 85/100

  nekko-labs/nekko-agent#1756 · Opened Nov 5, 2026

  Maintainers usually reply within 1 day

• [automated] Main CI failure issues discard the collected diagnosis

  Open

  ⋯Report a problem with this issue

  • Is something wrong?

  • Already taken
  • Not beginner-friendly
  • Stale or invalid
  • Something else…
  • Send Cancel
  needs-area-label

  Difficulty 2/5 1-3 hours Newbie friendliness 66/100

  microsoft/aspire#21778 · Opened Nov 5, 2026

  Maintainers usually reply within 2 days

More TypeScript issues