Waxell
Generate JavaScript server runtimes and CDN-free or CDN-enabled MCP App widgets.
Microsoft's own description, from the plugin's files.
Stars
1,109
Version
v1
Copies
0

Overview

Security

Security scan

Checked 2 days ago

Result

No issues Waxell's checks found nothing alarming in what's published.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (0)

No findings in what's published.

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (1.2.0), seen 2026-11-03.

Files

Files

33 files, 738 KB in total. Names only; open them on GitHub.

  • .claude-plugin/plugin.json
  • .plugin/plugin.json
  • README.md
  • assets/self-contained/PROVENANCE.json
  • assets/self-contained/THIRD-PARTY-NOTICES.md
  • assets/self-contained/licenses/fluentui-tokens.txt
  • assets/self-contained/licenses/modelcontextprotocol-ext-apps.txt
  • assets/self-contained/licenses/modelcontextprotocol-sdk.txt
  • assets/self-contained/licenses/standard-schema-spec.txt
  • assets/self-contained/licenses/swc-helpers.txt
  • assets/self-contained/licenses/zod-to-json-schema.txt
  • assets/self-contained/licenses/zod.txt
  • assets/self-contained/mcp-app-runtime.min.js
  • references/codeful-tool-host-data-api.d.ts
  • references/design-guidelines.md
  • references/mcp-apps-reference.md
  • samples/account-summary.tool.js
  • samples/account-summary.tool.json
  • samples/flight-status-widget.html
  • samples/self-contained-widget.template.html
  • samples/weather-refresh-widget.html
  • scripts/_vendor-build/.gitignore
  • scripts/_vendor-build/.npmrc
  • scripts/_vendor-build/build.js
  • scripts/_vendor-build/entry.js
  • scripts/_vendor-build/package-lock.json
  • scripts/_vendor-build/package.json
  • scripts/inline-self-contained-runtime.js
  • scripts/tests/self-contained-widget.test.js
  • skills/generate-codeful-mcp-tool/SKILL.md
  • skills/generate-mcp-app-ui/SKILL.md
  • skills/report-issue/SKILL.md
  • skills/report-issue/report-issue-workflow.md

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More engineering skills and plugins

See all