registry / @andy-toolforge/mcp / 1.3.1

@andy-toolforge/mcp@1.3.1

MCP server tools for media content generation — SEO, script analysis, TTS, image generation, book writing, project management, code analysis, voice assistant

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 31.2 KB of source

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Gemini (preferred) and Groq providers via environment variables.

5 *

6 * Priority: GEMINI_API_KEY > GROQ_API_KEY

7 *

8 * Model fallback chain (Gemini): GEMINI_MODEL_CHAIN > GEMINI_MODEL > default

9 * Example: GEMINI_MODEL_CHAIN=gemini-3.1-flash-lite,gemma-4-31b,gemma-4-26b

10 */

11const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L10

13let provider, apiKey, models;

15if (process.env.GEMINI_API_KEY) {

16 provider = 'gemini';

17 apiKey = process.env.GEMINI_API_KEY;

18 // Parse model chain: GEMINI_MODEL_CHAIN > GEMINI_MODEL > default

19 const rawModels = process.env.GEMINI_MODEL_CHAIN || process.env.GEMINI_MODEL || 'gemini-3.1-flash-lite';

20 models = rawModels.split(',').map(s => s.trim()).filter(Boolean);

21} else if (process.env.GROQ_API_KEY) {

22 provider = 'groq';

23 apiKey = process.env.GROQ_API_KEY;

24 models = [process.env.GROQ_MODEL || 'llama-3.3-70b-versatile'];

25} else {

26 console.error('Either GEMINI_API_KEY or GROQ_API_KEY environment variable is required');

27 process.exit(1);

28}

30const server = createServer({ provider, apiKey, models });

Source & flagged code

1 flagged · loading source

bin/cli.jsView file

10*/ L11: const { createServer } = require('../lib/index'); L12:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L10

Findings

2 Medium3 Low

MediumDynamic Requirebin/cli.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

bin/cli.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * CLI entry point for @andy-toolforge/mcp.

4 * Supports Gemini (preferred) and Groq providers via environment variables.

5 *

6 * Priority: GEMINI_API_KEY > GROQ_API_KEY

7 *

8 * Model fallback chain (Gemini): GEMINI_MODEL_CHAIN > GEMINI_MODEL > default

9 * Example: GEMINI_MODEL_CHAIN=gemini-3.1-flash-lite,gemma-4-31b,gemma-4-26b

10 */

11const { createServer } = require('../lib/index');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L10

13let provider, apiKey, models;

15if (process.env.GEMINI_API_KEY) {

16 provider = 'gemini';

17 apiKey = process.env.GEMINI_API_KEY;

18 // Parse model chain: GEMINI_MODEL_CHAIN > GEMINI_MODEL > default

19 const rawModels = process.env.GEMINI_MODEL_CHAIN || process.env.GEMINI_MODEL || 'gemini-3.1-flash-lite';

20 models = rawModels.split(',').map(s => s.trim()).filter(Boolean);

21} else if (process.env.GROQ_API_KEY) {

22 provider = 'groq';

23 apiKey = process.env.GROQ_API_KEY;

24 models = [process.env.GROQ_MODEL || 'llama-3.3-70b-versatile'];

25} else {

26 console.error('Either GEMINI_API_KEY or GROQ_API_KEY environment variable is required');

27 process.exit(1);

28}

30const server = createServer({ provider, apiKey, models });