registry / @compr/opscontext-mcp / 2.9.1

@compr/opscontext-mcp@2.9.1

OpsContext for AI Agents — read-only fleet visibility (PM2/nginx/Docker/git/cron) + tamper-evident audit log + policy-as-code hooks. The ops + compliance layer Claude Code can't grow natively.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The manifest has no install-time lifecycle hook, and the flagged configuration and persistence changes are reached through explicit CLI installer commands. The inspected source supports a clean verdict; scanner labels alone do not establish malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs an installer command such as install-claude-hook or install-autostart.

Impact

These commands enable user-requested event logging and automatic server startup; inspected source did not establish an unconsented install-time mutation or malicious behavior.

Mechanism

The hook installer adds package-owned entries to Claude settings; the autostart installer creates a user-level launch agent.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines a prepublish-only build hook but no preinstall, install, or postinstall hook.
The flagged agent-related code includes project-file checks and package-owned skill installation behavior.
The command-line entrypoint exposes the hook and autostart installers as explicit commands.
Hook installation writes OpsContext hook entries into Claude settings when its installer command runs.
Autostart is installed through an explicit command and is limited to a user-level macOS launch agent.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 42 file(s), 799 KB of source, external domains: 127.0.0.1, api.compr.ch, chatgpt.com, claude.ai, raw.githubusercontent.com, www.apple.com, www.npmjs.com

Source & flagged code

7 flagged

dist/adapters.jsView file

46} L47: const mod = await import(moduleSpecifier); L48: // Check for factory function

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/adapters.jsView on unpkg · L46

dist/install-autostart.jsView file

13Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/install-autostart.js L13: // forever — defeating the whole point. L14: // FIX: To add platform support beyond macOS, branch on process.platform and L15: // add equivalent systemd / NSSM logic. Keep `gui/$UID` and KeepAlive ... L19: import { homedir, platform } from "os"; L20: import { execSync } from "child_process"; L21: import { createRequire } from "module"; ... L34: const __filename_esm = fileURLToPath(import.meta.url); L35: const __dirname_esm = dirname(__filename_esm); L36: const requireFromHere = createRequire(import.meta.url); ... L101: // was itself run with it (an explicit choice, not a default). L102: export function buildPlist(nodePath, entryPath, nodeBinDir, env = process.env) { L103: // OPSCON

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/install-autostart.jsView on unpkg · L13

13// forever — defeating the whole point. L14: // FIX: To add platform support beyond macOS, branch on process.platform and L15: // add equivalent systemd / NSSM logic. Keep `gui/$UID` and KeepAlive ... L19: import { homedir, platform } from "os"; L20: import { execSync } from "child_process"; L21: import { createRequire } from "module"; ... L34: const __filename_esm = fileURLToPath(import.meta.url); L35: const __dirname_esm = dirname(__filename_esm); L36: const requireFromHere = createRequire(import.meta.url); ... L101: // was itself run with it (an explicit choice, not a default). L102: export function buildPlist(nodePath, entryPath, nodeBinDir, env = process.env) { L103: // OPSCONTEXT_DAEMON tells the server it has no MCP client on stdin and must stay alive on its

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/install-autostart.jsView on unpkg · L13

dist/install-claude-hook.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. import { existssync, readfilesync, writefilesync, copyfilesync, chmodsync, mkdirsync } from "fs"; import { join, dirname } from "path"; import { homedir } from "os"; import { fileurltopath } from "url"; import { execsync } from "child_process"; const __dirname_esm = dirname(fileurltopath(import.meta.url)); const claude_dir = jo

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/install-claude-hook.jsView on unpkg

defaults/claude-code-hook.shView file

•path = defaults/claude-code-hook.sh kind = build_helper sizeBytes = 4024 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

defaults/claude-code-hook.shView on unpkg

dist/activation.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 6

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/activation.js#virtual:normalized:round1View on unpkg

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @compr/opscontext-mcp@2.8.2 matchedIdentity = npm:QGNvbXByL29wc2NvbnRleHQtbWNw:2.8.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/adapters.jsView file

46} L47: const mod = await import(moduleSpecifier); L48: // Check for factory function

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/adapters.jsView on unpkg · L46

dist/install-autostart.jsView file

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/install-autostart.jsView on unpkg · L13

Findings

4 High6 Medium5 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationdist/install-claude-hook.js

HighTrigger Reachable Persistencedist/install-autostart.js

HighSemantic Analysis Limiteddist/activation.js#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/cli.js

MediumDynamic Requiredist/adapters.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/install-autostart.js

MediumShips Build Helperdefaults/claude-code-hook.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Affected versions and remediation

This report applies to @compr/opscontext-mcp@2.9.1.

See all versions of @compr/opscontext-mcp for other recorded verdicts.

Review the evidence and your use of @compr/opscontext-mcp@2.9.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 07:04:51.622Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.