Most MCP servers suggest using npx -y as the recommended way to install a server. This downloads and executes arbitrary scripts from the internet. This is grossly insecure and I think the MCP authors sh

{
  "mcpServers": {
    "consideredharmful": {
      "command": "npx",
      "args": [
        "-y",
        "@considered/harmful"
      ]
    }
  }
}