Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@avidian/mcp-slack@0.1.1: Clean npm security report (Allow) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 11 low-signal pattern(s) reviewed.

View on npm All versions

registry / @avidian/mcp-slack / 0.1.1

@avidian/mcp-slack@0.1.1

TOON-first Model Context Protocol server for Slack, with dual-token auth and both stdio and Streamable HTTP transports.

AI Security Review

scanned 18d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package exposes user-invoked MCP tools for Slack API operations, including local file upload when a tool caller supplies file_path.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs mcp-slack via bin and an MCP client invokes Slack tools.

Impact

Agent/client can perform Slack actions allowed by configured tokens; no hidden install-time behavior or unconsented control-surface mutation found.

Mechanism

Slack MCP server wrapping Slack Web API methods

Rationale

Static inspection shows a documented Slack MCP server with Slack-token environment configuration, stdio/local HTTP transports, and package-aligned Slack API calls. The suspicious scanner hits come from bundled dependencies or documented user-invoked MCP capabilities, with no install-time execution, persistence, credential harvesting, or covert exfiltration.

Evidence

package.jsonREADME.mddist/index.js

Network endpoints2

slack.com/api/127.0.0.1:3000/mcp

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Evidence for block

Runtime MCP tools can read Slack data, post/edit/delete Slack messages, search messages, and upload local files when invoked.
dist/index.js supports slack_upload_file with inline content or file_path passed to Slack filesUploadV2.

Evidence against

package.json has no install/postinstall hook; prepublishOnly only builds before publishing.
bin points to dist/index.js, a documented MCP Slack server entrypoint.
Environment access is limited to documented Slack/Auth/config variables in loadConfig.
Network use is package-aligned Slack Web API plus optional local HTTP MCP transport with bearer auth.
No package code writes agent configs, shell startup files, VCS hooks, or persistence files.
child_process/eval hits are bundled commander/dependency code, not package execution logic.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.87 MB of source, external domains: docs.slack.dev, github.com, json-schema.org, raw.githubusercontent.com, slack.com

Source & flagged code

4 flagged · loading source

dist/index.jsView file

31544import { EventEmitter } from "node:events"; L31545: import childProcess from "node:child_process"; L31546: import path from "node:path";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L31544

148prepack: "npm run build", L149: test: "npm run build && bash -c 'node --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test... L150: "test:coverage": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.i...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L148

148prepack: "npm run build", L149: test: "npm run build && bash -c 'node --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test... L150: "test:coverage": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.i... ... L160: "@types/retry": "0.12.0", L161: axios: "^1.16.0", L162: eventemitter3: "^5.0.1", L163: "form-data": "^4.0.4", L164: "is-electron": "2.2.2",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L148

22266sourceCode = this.opts.code.process(sourceCode, sch); L22267: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L22268: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L22266

Findings

3 High2 Medium6 Low

HighChild Processdist/index.js

HighShelldist/index.js

HighCommand Output Exfiltrationdist/index.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

93%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Authoravidianity

Maintainersavidian

Version0.5.0

PublishedJul 1, 2026

LicenseMIT

Dependencies5

Integrityverified

Package size351 KB

Files4

Keywordsmcpmodel-context-protocolslacktoonaillm

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → mcp-slack

Runtimenode >=20

Artifact1.88 MB · 4 files1 signature(s) · provenance

Install lifecycleprepublishOnly

Behavioral surface

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

LPM CLI

Source & flagged code

4 flagged

dist/index.jsView file

31544import { EventEmitter } from "node:events"; L31545: import childProcess from "node:child_process"; L31546: import path from "node:path";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L31544

148prepack: "npm run build", L149: test: "npm run build && bash -c 'node --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test... L150: "test:coverage": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.i...

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L148

148prepack: "npm run build", L149: test: "npm run build && bash -c 'node --test-reporter=spec --test-reporter-destination=stdout --test-reporter=junit --test-reporter-destination=test-results.xml --import tsx --test... L150: "test:coverage": "npm run build && node --experimental-test-coverage --test-reporter=spec --test-reporter-destination=stdout --test-reporter=lcov --test-reporter-destination=lcov.i... ... L160: "@types/retry": "0.12.0", L161: axios: "^1.16.0", L162: eventemitter3: "^5.0.1", L163: "form-data": "^4.0.4", L164: "is-electron": "2.2.2",

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L148

22266sourceCode = this.opts.code.process(sourceCode, sch); L22267: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L22268: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L22266