registry / @denkopsai/mcp / 0.1.11

@denkopsai/mcp@0.1.11

DenkOps MCP server (stdio) — deploy and operate micro-APIs on DenkOps from any MCP-capable agent (Codex, OpenClaw, Hermes, …). Requires DENKOPS_TOKEN (from the DenkOps dashboard → Connect) and DENKOPS_CONTROL_PLANE_URL.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 810 KB of source, external domains: api.denkops.com, github.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

2 flagged

dist/mcp.mjsView file

1226var names = { L1227: data: new codegen_1.Name("data"), L1228: valCxt: new codegen_1.Name("valCxt"), ... L2213: id = normalizeId(id); L2214: return resolver.resolve(baseId, id); L2215: } ... L3061: for (i = 0;i < input.length; i++) { L3062: code = input[i].charCodeAt(0); L3063: if (code === 48) { ... L19521: class StdioServerTransport { L19522: constructor(_stdin = process2.stdin, _stdout = process2.stdout) { L19523: this._stdin = _stdin;

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/mcp.mjsView on unpkg · L1226

2892sourceCode = this.opts.code.process(sourceCode, sch); L2893: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2894: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcp.mjsView on unpkg · L2892

Source & flagged code

2 flagged · loading source

dist/mcp.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code