registry / @compr/opscontext-mcp / 2.17.0
@compr/opscontext-mcp@2.17.0
OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe reviewer-directed instruction is suspicious and merits warning, but it does not prove harmful execution. The flagged persistence and agent setup are explicit-command features, while the manifest has no install lifecycle hook.
Static reason
No blocking static signals were detected.
Trigger
The reviewer-directed comment is present in the activation source; it does not execute as code.
Impact
The comment could bias a review, but the inspected source does not establish unauthorized control-surface mutation, credential theft, or persistence during package installation.
Mechanism
The comment tells reviewers not to re-audit activation behavior. Separately inspected setup and persistence changes are behind explicit CLI commands.
AI rationale
The reviewer-directed instruction is suspicious and merits warning, but it does not prove harmful execution. The flagged persistence and agent setup are explicit-command features, while the manifest has no install lifecycle hook.
Evidence
dist/activation.jsdist/cli.jsdist/install-claude-hook.jsdist/install-autostart.js
Network endpoints1
api.compr.ch/contextengine
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Malware with medium false-positive risk.
Evidence for warning
- dist/activation.js contains a reviewer-directed instruction not to re-audit it, which is manipulation evidence but does not establish an attack.
- The manifest has no preinstall, install, or postinstall hook; its only lifecycle script is prepublishOnly.
- The flagged Claude hook installer writes a hook into Claude settings when its CLI installer is invoked.
- Autostart persistence is written by an explicit CLI installer command.
- Activation sends caller-provided license and email data to the package-aligned API endpoint.
- The inspected agent integration targets concern bundled skill paths, project-file checks, or settings parsing; they do not establish unconsented broad control-surface mutation.
Evidence against
- The manifest's runtime dependencies do not include the package itself.
- Claude skill installation writes the package's bundled skill to the selected project or user skill directory.
- The observed activation request is tied to an explicit activation command and the package's default API host.
Behavioral surface
ChildProcess
Source & flagged code
5 flagged · loading sourcedist/install-autostart.jsView file
13Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/install-autostart.js
L13: // forever — defeating the whole point.
L14: // FIX: To add platform support beyond macOS, branch on process.platform and
L15: // add equivalent systemd / NSSM logic. Keep `gui/$UID` and KeepAlive
...
L19: import { homedir, platform } from "os";
L20: import { execFileSync } from "child_process";
L21: import { createRequire } from "module";
...
L34: const __filename_esm = fileURLToPath(import.meta.url);
L35: const __dirname_esm = dirname(__filename_esm);
L36: const requireFromHere = createRequire(import.meta.url);
...
L102: // [LOCKED] [AUTOSTART-ARGV-AND-XML-ESCAPED] - 2026-09-25
L103: // [NEVER] paste a path into a launchctl/lsof/curl command string, or into the plist unescaped.
L104:
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/install-autostart.jsView on unpkg · L1313// forever — defeating the whole point.
L14: // FIX: To add platform support beyond macOS, branch on process.platform and
L15: // add equivalent systemd / NSSM logic. Keep `gui/$UID` and KeepAlive
...
L19: import { homedir, platform } from "os";
L20: import { execFileSync } from "child_process";
L21: import { createRequire } from "module";
...
L34: const __filename_esm = fileURLToPath(import.meta.url);
L35: const __dirname_esm = dirname(__filename_esm);
L36: const requireFromHere = createRequire(import.meta.url);
...
L102: // [LOCKED] [AUTOSTART-ARGV-AND-XML-ESCAPED] - 2026-09-25
L103: // [NEVER] paste a path into a launchctl/lsof/curl command string, or into the plist unescaped.
L104: // WHY: with a home folder named "John Smith", `launchctl bootstrap gui/501 ${PLIST_FILE}` han
Findings
3 High5 Medium5 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-claude-hook.js
HighTrigger Reachable Persistencedist/install-autostart.js
HighSemantic Analysis Limiteddist/activation.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/install-autostart.js
MediumShips Build Helperdefaults/claude-code-hook.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @compr/opscontext-mcp@2.17.0.
See all versions of @compr/opscontext-mcp for other recorded verdicts.
- Review the evidence and your use of @compr/opscontext-mcp@2.17.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.