registry / @cachly-dev/mcp-server / 0.10.180
@cachly-dev/mcp-server@0.10.180
Solve it once. From then on, your AI knows. Experience for coding agents, EU-hosted: 124 MCP tools for Claude Code, Cursor, Copilot & Windsurf. Learns from every bug fix, commit and CI run.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe inspected source supports a warning for first-party agent integration and configuration setup, but does not establish malicious behavior or an install-time attack. The postinstall script is informational, and the inspected network paths are package-aligned.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the package’s setup or related configuration command.
Impact
These capabilities can change agent configuration and enable later hook behavior; the inspected evidence does not establish unconsented npm-install mutation or credential theft.
Mechanism
The package can install its ambient hook and write or update its own Cachly editor configuration entry.
AI rationale
The inspected source supports a warning for first-party agent integration and configuration setup, but does not establish malicious behavior or an install-time attack. The postinstall script is informational, and the inspected network paths are package-aligned.
Evidence
dist/src/index.jsdist/src/ambient-hooks.jsdist/src/handlers/brain.js.claude/mcp.json.cursor/mcp.json.codeium/windsurf/mcp_config.json
Network endpoints1
api.cachly.dev
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a command-line entrypoint and runs a postinstall script that prints setup instructions.
- The server can write its own Cachly entry into Claude MCP configuration while saving a credential.
- The server supports installing ambient hooks and updating editor configuration as part of its setup features.
- Automatic git-history learning is gated by a preference and sends data to the Cachly service.
- The inspected vector-search request targets the package’s Cachly service.
Evidence against
- The postinstall script only prints instructions; the inspected script contains no filesystem or network operation.
- Credential-bearing configuration changes concern the package’s own Cachly MCP entry.
- The inspected automatic git-history path is gated by a saved preference.
- The inspected outbound vector-search request uses a Cachly service endpoint.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
15 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/src/autor.jsView file
1import{execSync as c}from"node:child_process";const f=e=>n=>{try{return c(`git config ${n}`,{cwd:e,encoding:"utf-8",stdio:"pipe",timeout:1500}).trim()}catch{return""}};function t(e...
High
Findings
2 Critical11 High5 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationdist/src/index.js
CriticalPrevious Version Dangerous Deltadist/src/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/src/autor.js
HighShell
HighSame File Env Network Executiondist/src/index.js
HighCredential Exfiltrationdist/src/index.js
HighCommand Output Exfiltrationdist/src/index.js
HighSandbox Evasion Gated Capabilitydist/src/index.js
HighTrigger Reachable Credential Exfiltrationdist/src/index.js
HighTrigger Reachable Command Output Exfiltrationdist/src/index.js
High
Affected versions and remediation
This report applies to @cachly-dev/mcp-server@0.10.180.
See all versions of @cachly-dev/mcp-server for other recorded verdicts.
- Review the evidence and your use of @cachly-dev/mcp-server@0.10.180 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.