registry / @compr/opscontext-mcp / 2.18.0
@compr/opscontext-mcp@2.18.0
OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found no npm install lifecycle trigger, and the reviewed configuration changes are exposed through explicit CLI setup paths. The activation request uses the package-aligned API; the reviewed evidence does not establish an attack.
Static reason
No blocking static signals were detected.
Trigger
User-invoked CLI setup commands; activation occurs when the user activates a license.
Impact
No confirmed unauthorized agent-control mutation, credential theft, or other attack effect was established.
Mechanism
The package can install its skill or hook into Claude configuration and activate a license with api.compr.ch; the reviewed sources do not show automatic lifecycle execution of these actions.
AI rationale
Source inspection found no npm install lifecycle trigger, and the reviewed configuration changes are exposed through explicit CLI setup paths. The activation request uses the package-aligned API; the reviewed evidence does not establish an attack.
Evidence
package.jsondist/agents.jsdist/claude-integration.jsdist/cli.jsdist/install-claude-hook.jsdist/secrets-lock.jsdist/shared-index.jsdist/agent-restart.jsdist/activation.js
Network endpoints1
api.compr.ch/contextengine
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines no preinstall, install, or postinstall hook; its only lifecycle-related script is prepublishOnly.
- Agent and Claude configuration behavior is explicit setup or project-inspection functionality: skill paths are selected by scope, hook wiring uses Claude settings paths, secrets-lock reads settings, and shared-index references MCP configuration.
- The agent restart helper is conditional on daemon/build state; activation sends a request to the package-aligned api.compr.ch endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
5 flagged · loading sourcedist/install-autostart.jsView file
13// forever — defeating the whole point.
L14: // FIX: To add platform support beyond macOS, branch on process.platform and
L15: // add equivalent systemd / NSSM logic. Keep `gui/$UID` and KeepAlive
...
L19: import { homedir, platform } from "os";
L20: import { execFileSync } from "child_process";
L21: import { createRequire } from "module";
...
L34: const __filename_esm = fileURLToPath(import.meta.url);
L35: const __dirname_esm = dirname(__filename_esm);
L36: const requireFromHere = createRequire(import.meta.url);
...
L102: // [LOCKED] [AUTOSTART-ARGV-AND-XML-ESCAPED] - 2026-09-25
L103: // [NEVER] paste a path into a launchctl/lsof/curl command string, or into the plist unescaped.
L104: // WHY: with a home folder named "John Smith", `launchctl bootstrap gui/501 ${PLIST_FILE}` han
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/install-autostart.jsView on unpkg · L13dist/install-claude-hook.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
import { existssync, readfilesync, writefilesync, copyfilesync, chmodsync, mkdirsync } from "fs";
import { join, dirname } from "path";
import { homedir } from "os";
import { fileurltopath } from "url";
import { execsync } from "child_process";
const __dirname_esm = dirname(fileurltopath(import.meta.url));
const claude_dir = jo
Findings
3 High5 Medium5 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-claude-hook.js
HighTrigger Reachable Persistencedist/agent-restart.js
HighSemantic Analysis Limiteddist/activation.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/install-autostart.js
MediumShips Build Helperdefaults/claude-code-hook.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @compr/opscontext-mcp@2.18.0.
See all versions of @compr/opscontext-mcp for other recorded verdicts.
- Review the evidence and your use of @compr/opscontext-mcp@2.18.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.