No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by shlokkhemani · MCP Server · ★ 310
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is rabbithole safe to install? View the security audit →
Rabbithole An infinite canvas for learning. Open a document, select any text, ask a question — and the answer opens as a fully-rendered child document. Recurse as deep as you like. Every hole is saved and revisitable. Rabbithole is an MCP server. Your terminal agent (Claude Code, Codex, or any MCP client) does the answering; Rabbithole gives it a canvas in your browser. Everything runs locally — no account, no API keys, nothing leaves your machine. 🌐 rabbithole.ing Quick start Requires Node 18+ and a browser. Pick your agent: Claude Code Claude Code's default stdio MCP timeout is already long enough for Rabbithole's blocking wait. If you manage manually, this optional per-server field is also fine: Codex Then add the timeout field in : cannot set ; edit the config file directly. Any other MCP client — add this to its MCP config: json { "mcpServers": { "rabbithole": { "command": "npx",
| Stars | 310 |
| Forks | 44 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 70.3333226178318/100 |
| Open Issues | 3 |
| Last Updated | 2026-09-16 |
| Created | 2026-07-06 |
| Platforms | claude-code, codex, mcp, node |
| Est. Tokens | ~15k |
Explore other popular mcp server tools:
rabbithole is An infinite canvas for learning — select text, ask, and answers branch out as documents. MCP server for Claude Code, Codex, and any agent.. It is categorized as a MCP Server with 310 GitHub stars.
rabbithole is primarily written in JavaScript.
You can find installation instructions and usage details in the rabbithole GitHub repository at github.com/shlokkhemani/rabbithole. The project has 310 stars and 44 forks, indicating an active community.
rabbithole is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: