registry / @cachly-dev/mcp-server / 0.10.129

@cachly-dev/mcp-server@0.10.129

Your AI forgets everything between sessions. cachly fixes that permanently: 122 MCP tools for Claude Code, Cursor, Copilot & Windsurf. Learns from every bug fix, commit and CI run. Arrives pre-briefed. Free tier forever, EU servers, GDPR.

AI Security Review

scanned 13d ago · by lpm-firewall-ai

Source inspection found an output-only postinstall hook and no confirmed attack behavior. The scanner’s credential and agent-configuration signals map to service-aligned search and explicit setup behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

The package’s postinstall hook runs during installation; its runtime tools and setup commands require their respective invocation.

Impact

No confirmed credential exfiltration, unconsented agent control-surface mutation, or other attack was established.

Mechanism

Postinstall prints guidance only. Semantic search uses a Cachly token in its default service URL; the operator-configured vector URL replaces that URL, and the search request sends the query payload.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook only prints setup guidance; it does not perform the advertised configuration changes.
Credential persistence updates Cachly’s own MCP entry, while ambient hooks read the key from the environment or local credentials file.
Semantic search uses the Cachly vector token in its default URL; a configured vector URL replaces that URL, and the request sends the search payload.
The agent-related code inspected builds hooks and setup guidance; the inspected setup and git-hook paths are explicit CLI features.
The benchmark, git hook, and author helper findings are scoped to benchmarking, post-commit setup, and reading Git configuration.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

12 flagged

package.jsonView file

Lines 16-56json

16 "cachly-mcp": "dist/src/index.js"

17 },

18 "main": "./dist/src/index.js",

19 "scripts": {

20 "count-tools": "node scripts/count-tools.mjs",

21 "tool-catalog": "node scripts/tool-catalog.mjs summary",

22 "tool-catalog:json": "node scripts/tool-catalog.mjs json",

23 "tool-catalog:markdown": "node scripts/tool-catalog.mjs markdown",

24 "capability-docs": "node scripts/capability-docs.mjs markdown",

25 "capability-docs:write": "node scripts/capability-docs.mjs write",

26 "verify-capability-docs": "node scripts/capability-docs.mjs check",

27 "docs-atlas": "node scripts/docs-atlas.mjs summary",

28 "docs-atlas:write": "node scripts/docs-atlas.mjs write",

29 "verify-docs-atlas": "node scripts/docs-atlas.mjs check",

30 "tool-spec-snapshots:write": "node scripts/tool-spec-snapshots.mjs write",

31 "version": "node scripts/nummer-nachziehen.mjs && npm run tool-spec-snapshots:write",

32 "verify-tool-spec-snapshots": "node scripts/tool-spec-snapshots.mjs check",

33 "verify-tool-counts": "node scripts/verify-tool-counts.mjs",

34 "verify-capabilities": "node scripts/verify-capabilities.mjs",

35 "build": "tsc && node scripts/bauabdruck.mjs",

36 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L36

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L36

37 "dev": "tsx src/index.ts",

38 "start": "node dist/src/index.js",

39 "test": "vitest run",

40 "test:watch": "vitest",

41 "bench": "tsx src/bench/echter-korpus.ts",

42 "bench:spielzeug": "tsx src/bench/cachly-bench.ts",

43 "bench:external": "tsx src/bench/external-corpus.ts",

44 "bench:onboarding": "tsx src/bench/onboarding-bench.ts",

45 "bench:gate": "tsx src/bench/gate.ts",

46 "test:e2e": "bash scripts/e2e-run.sh",

47 "test:e2e:api": "bash scripts/e2e-run.sh api",

48 "test:e2e:cli": "bash scripts/e2e-run.sh cli",

49 "test:e2e:tools": "bash scripts/e2e-run.sh tools",

50 "test:e2e:funnel": "bash scripts/e2e-run.sh funnel",

51 "test:e2e:provisioning": "bash scripts/e2e-run.sh provisioning",

52 "lint": "eslint src",

53 "typecheck": "tsc --noEmit",

54 "bench:cost": "tsx src/bench/cost.ts"

55 },

56 "dependencies": {

dist/src/bench/cachly-bench.js#virtual:normalized:round1View file

55get(key) { cmds.push(key); return this; }, L56: async exec() { L57: return cmds.map(k => [null, store.get(k) ?? null]);

High

Child Process

Package source references child process execution.

dist/src/bench/cachly-bench.js#virtual:normalized:round1View on unpkg · L55

dist/src/index.jsView file

Lines 46-86javascript

46 * CACHLY_EMBED_PROVIDER – embedding backend: openai (default), gemini, mistral, cohere, ollama, cachly (server fallback)

47 * CACHLY_EMBED_MODEL – override embedding model (optional)

48 */

49import { Server } from

dist/src/confidence.jsView file

2// ── Confidence Decay Config ─────────────────────────────────────────────────── L3: export const CONFIDENCE_WARN_DAYS = Number(process.env.CACHLY_CONFIDENCE_WARN_DAYS ?? 5); L4: export const CONFIDENCE_STALE_DAYS = Number(process.env.CACHLY_CONFIDENCE_STALE_DAYS ?? 10);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/confidence.jsView on unpkg · L2

dist/src/handlers/cache.jsView file

Lines 12-52javascript

12 'cache_stats', 'semantic_search', 'detect_namespace', 'cache_warmup', 'index_project',

13 'cache_mset', 'cache_mget', 'cache_lock_acquire', 'cache_lock_release',

14 'cache_stream_set', 'cache_stream_get'

dist/src/cls-hook.jsView file

69"files:(process.env.CLS_FILES||'').split(',').filter(Boolean)}};" + L70: "require('child_process').execFileSync('npx',['@cachly-dev/mcp-server@latest','cls-ingest',JSON.stringify(p)]," + L71: "{stdio:'ignore',timeout:8000});" +

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cls-hook.jsView on unpkg · L69

dist/src/autor.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/autor.js#virtual:normalized:round1View on unpkg

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/bench/cachly-bench.js#virtual:normalized:round1View file

55get(key) { cmds.push(key); return this; }, L56: async exec() { L57: return cmds.map(k => [null, store.get(k) ?? null]);

High

Child Process

Package source references child process execution.

dist/src/bench/cachly-bench.js#virtual:normalized:round1

Findings

10 High5 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/src/bench/cachly-bench.js#virtual:normalized:round1

HighShell

HighCredential Exfiltrationdist/src/handlers/cache.js

HighCredential Redirect Persistencedist/src/index.js

HighExternal Ai Agent Control Surface Mutationdist/src/index.js

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/src/index.js

HighTrigger Reachable Credential Exfiltrationdist/src/handlers/cache.js

HighRuntime Package Installdist/src/cls-hook.js

HighSemantic Analysis Limiteddist/src/autor.js#virtual:normalized:round1

MediumAmbiguous Install Lifecycle Scriptpackage.json

Affected versions and remediation

This report applies to @cachly-dev/mcp-server@0.10.129.

See all versions of @cachly-dev/mcp-server for other recorded verdicts.

Review the evidence and your use of @cachly-dev/mcp-server@0.10.129 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-09 17:51:33.867Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.