registry / @andy-toolforge/mcp / 1.0.1

@andy-toolforge/mcp@1.0.1

MCP server tools for media content generation — SEO, script analysis via Gemini

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 28.9 KB of source

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Groq (preferred) and Gemini providers via environment variables.

5 *

6 * Priority: GROQ_API_KEY > GEMINI_API_KEY

7 */

8const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

10let provider, apiKey, model;

12if (process.env.GROQ_API_KEY) {

13 provider = 'groq';

14 apiKey = process.env.GROQ_API_KEY;

15 model = process.env.GROQ_MODEL || 'llama-3.3-70b-versatile';

16} else if (process.env.GEMINI_API_KEY) {

17 provider = 'gemini';

18 apiKey = process.env.GEMINI_API_KEY;

19 model = process.env.GEMINI_MODEL || 'gemini-2.0-flash';

20} else {

21 console.error('Either GROQ_API_KEY or GEMINI_API_KEY environment variable is required');

22 process.exit(1);

23}

25const server = createServer({ provider, apiKey, model });

26server.start().catch(err => {

27 console.error('MCP server error:', err);

Source & flagged code

1 flagged · loading source

bin/cli.jsView file

7*/ L8: const { createServer } = require('../lib/index'); L9:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

Findings

2 Medium3 Low

MediumDynamic Requirebin/cli.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Groq (preferred) and Gemini providers via environment variables.

5 *

6 * Priority: GROQ_API_KEY > GEMINI_API_KEY

7 */

8const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

10let provider, apiKey, model;

12if (process.env.GROQ_API_KEY) {

13 provider = 'groq';

14 apiKey = process.env.GROQ_API_KEY;

15 model = process.env.GROQ_MODEL || 'llama-3.3-70b-versatile';

16} else if (process.env.GEMINI_API_KEY) {

17 provider = 'gemini';

18 apiKey = process.env.GEMINI_API_KEY;

19 model = process.env.GEMINI_MODEL || 'gemini-2.0-flash';

20} else {

21 console.error('Either GROQ_API_KEY or GEMINI_API_KEY environment variable is required');

22 process.exit(1);

23}

25const server = createServer({ provider, apiKey, model });

26server.start().catch(err => {

27 console.error('MCP server error:', err);