registry / @andy-toolforge/mcp / 1.1.0

@andy-toolforge/mcp@1.1.0

MCP server tools for media content generation — SEO, script analysis, image generation, book writing, project management, code analysis

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 28.9 KB of source

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Gemini (preferred) and Groq providers via environment variables.

5 *

6 * Priority: GEMINI_API_KEY > GROQ_API_KEY

7 */

8const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

10let provider, apiKey, model;

12if (process.env.GEMINI_API_KEY) {

13 provider = 'gemini';

14 apiKey = process.env.GEMINI_API_KEY;

15 model = process.env.GEMINI_MODEL || 'gemini-2.0-flash';

16} else if (process.env.GROQ_API_KEY) {

17 provider = 'groq';

18 apiKey = process.env.GROQ_API_KEY;

19 model = process.env.GROQ_MODEL || 'llama-3.3-70b-versatile';

20} else {

21 console.error('Either GEMINI_API_KEY or GROQ_API_KEY environment variable is required');

22 process.exit(1);

23}

25const server = createServer({ provider, apiKey, model });

26server.start().catch(err => {

27 console.error('MCP server error:', err);

Source & flagged code

1 flagged · loading source

bin/cli.jsView file

7*/ L8: const { createServer } = require('../lib/index'); L9:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

Findings

2 Medium3 Low

MediumDynamic Requirebin/cli.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Gemini (preferred) and Groq providers via environment variables.

5 *

6 * Priority: GEMINI_API_KEY > GROQ_API_KEY

7 */

8const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L7

10let provider, apiKey, model;

12if (process.env.GEMINI_API_KEY) {

13 provider = 'gemini';

14 apiKey = process.env.GEMINI_API_KEY;

15 model = process.env.GEMINI_MODEL || 'gemini-2.0-flash';

16} else if (process.env.GROQ_API_KEY) {

17 provider = 'groq';

18 apiKey = process.env.GROQ_API_KEY;

19 model = process.env.GROQ_MODEL || 'llama-3.3-70b-versatile';

20} else {

21 console.error('Either GEMINI_API_KEY or GROQ_API_KEY environment variable is required');

22 process.exit(1);

23}

25const server = createServer({ provider, apiKey, model });

26server.start().catch(err => {

27 console.error('MCP server error:', err);