registry / @ainecto/mcp / 0.1.3

@ainecto/mcp@0.1.3

Ainecto MCP connector and first-party CLI.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 2 file(s), 250 KB of source, external domains: 127.0.0.1, ainecto.com, dev.ainecto.com

Source & flagged code

3 flagged

dist/bin/ainecto.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

3// src/core/auth/tokenStore.ts

4import { createHash } from "crypto";

5import { mkdir, readFile, rename, rm, stat, writeFile, chmod } from "fs/promises";

6import { homedir } from "os";

7import { dirname, join } from "path";

8var FileTokenStore = class {

9 filePath;

10 constructor(rootDir = join(homedir(), ".ainecto")) {

11 this.filePath = join(rootDir, "tokens.json");

12 }

13 async load(endpoint) {

14 const file = await this.readFile();

15 return file[tokenKey(endpoint)];

16 }

17 async save(endpoint, token) {

18 const file = await this.readFile();

19 file[tokenKey(endpoint)] = { ...token, endpoint, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };

20 await this.writeFile(file);

21 }

22 async delete(endpoint) {

23 const file = await this.readFile();

24 delete file[tokenKey(endpoint)];

25 await this.writeFile(file);

26 }

27 async readFile() {

28 try {

29 const raw = await readFile(this.filePath, "utf8");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin/ainecto.jsView on unpkg · L9

Lines 42-82javascript

42 async writeFile(file) {

43 await mkdir(dirname(this.filePath), { recursive: true, mode: 448 });

44 await chmod(dirname(this.filePath), 448);

45 const tmpPath = `${this.filePath}.${process

Lines 302-342javascript

302 throw new Error("Loopback OAuth server did not bind to a TCP port.");

303 }

304 return {

305 redirectUri: `http://127.0.0.1:${address.port}/callback`,

306 waitForCode: () => codePromise,

307 close: () => new Promise((resolve

Source & flagged code

3 flagged · loading source

dist/bin/ainecto.jsView file

62import { createServer } from "http"; L63: import { spawn } from "child_process"; L64: import { URLSearchParams } from "url";

High

Child Process

Package source references child process execution.

dist/bin/ainecto.jsView on unpkg · L62

322const args = process.platform === "win32" ? ["/c", "start", "", url] : [url]; L323: const child = spawn(command, args, { stdio: "ignore", detached: true }); L324: child.unref(); ... L328: var DEFAULT_ENDPOINTS = { L329: prod: "https://ainecto.com/mcp", L330: dev: "https://dev.ainecto.com/mcp" ... L332: function resolveEndpoint(input = {}) { L333: const envVars = input.envVars ?? process.env; L334: const env = input.env ?? "prod";

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin/ainecto.jsView on unpkg · L322

9filePath; L10: constructor(rootDir = join(homedir(), ".ainecto")) { L11: this.filePath = join(rootDir, "tokens.json"); ... L29: const raw = await readFile(this.filePath, "utf8"); L30: const parsed = JSON.parse(raw); L31: if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) { ... L61: import { createHash as createHash2, randomBytes } from "crypto"; L62: import { createServer } from "http"; L63: import { spawn } from "child_process"; L64: import { URLSearchParams } from "url"; L65: ... L99: this.fetchImpl = options.fetchImpl ?? fetch;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin/ainecto.jsView on unpkg · L9

Findings

4 High3 Medium5 Low

HighChild Processdist/bin/ainecto.js

HighShell

HighSame File Env Network Executiondist/bin/ainecto.js

HighSandbox Evasion Gated Capabilitydist/bin/ainecto.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/bin/ainecto.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

3// src/core/auth/tokenStore.ts

4import { createHash } from "crypto";

5import { mkdir, readFile, rename, rm, stat, writeFile, chmod } from "fs/promises";

6import { homedir } from "os";

7import { dirname, join } from "path";

8var FileTokenStore = class {

9 filePath;

10 constructor(rootDir = join(homedir(), ".ainecto")) {

11 this.filePath = join(rootDir, "tokens.json");

12 }

13 async load(endpoint) {

14 const file = await this.readFile();

15 return file[tokenKey(endpoint)];

16 }

17 async save(endpoint, token) {

18 const file = await this.readFile();

19 file[tokenKey(endpoint)] = { ...token, endpoint, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };

20 await this.writeFile(file);

21 }

22 async delete(endpoint) {

23 const file = await this.readFile();

24 delete file[tokenKey(endpoint)];

25 await this.writeFile(file);

26 }

27 async readFile() {

28 try {

29 const raw = await readFile(this.filePath, "utf8");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bin/ainecto.jsView on unpkg · L9

Lines 42-82javascript

42 async writeFile(file) {

43 await mkdir(dirname(this.filePath), { recursive: true, mode: 448 });

44 await chmod(dirname(this.filePath), 448);

45 const tmpPath = `${this.filePath}.${process

Lines 302-342javascript

302 throw new Error("Loopback OAuth server did not bind to a TCP port.");

303 }

304 return {

305 redirectUri: `http://127.0.0.1:${address.port}/callback`,

306 waitForCode: () => codePromise,

307 close: () => new Promise((resolve