registry / @echomem/mcp / 1.4.3
@echomem/mcp@1.4.3
EchoMem Cloud-First MCP Server
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection shows sensitive primitives are aligned with the package's documented MCP memory, setup, HUD, and migration features and are activated by explicit commands or tool calls, not lifecycle or hidden import-time behavior. The scanner's dangerous-delta and network findings are real capability changes but do not establish unconsented execution or exfiltration.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs echomem-mcp/echomem-hud commands or MCP tools; no install-time trigger.
Impact
Can store credentials locally, configure supported MCP clients, read local agent transcripts, and send selected EchoMem data to package-aligned APIs when invoked.
Mechanism
Authenticated MCP bridge plus optional local setup, telemetry, HUD, and migration utilities.
AI rationale
Static inspection shows sensitive primitives are aligned with the package's documented MCP memory, setup, HUD, and migration features and are activated by explicit commands or tool calls, not lifecycle or hidden import-time behavior. The scanner's dangerous-delta and network findings are real capability changes but do not establish unconsented execution or exfiltration.
Evidence
package.jsondist/index.jsdist/setup.jsdist/keystore.jsdist/events.jsdist/migrate.jsdist/codex-sync.jsdist/hud/hooks.jsdist/hud/cli.jsdist/hud/adapters.js~/.echomem/credentials.json~/.echomem/events.jsonl~/.echomem/migrate-ledger.json~/.echomem/migrate-metrics.jsonl~/.codex/config.toml~/.codex/hooks.json~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json~/Library/Application Support/Claude/claude_desktop_config.json
Network endpoints3
echo-mem-chrome.vercel.appmemory-feed.vercel.appyeahecho.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- dist/setup.js can write MCP client configs and Codex config, but only via setup/update subcommands.
- dist/hud/hooks.js can write Codex hook config, but only via echomem-hud install-hooks.
- dist/migrate.js and dist/codex-sync.js can read local Codex/Claude logs and upload summaries/transcripts after explicit sync/migrate actions.
Evidence against
- package.json has no install/preinstall/postinstall lifecycle hooks.
- dist/index.js starts an MCP stdio server; no import-time config mutation beyond serving when bin is run.
- Network endpoints are package-aligned EchoMem services: echo-mem-chrome.vercel.app, memory-feed.vercel.app, yeahecho.com.
- Keystore writes are documented local credentials under ~/.echomem with 0600-style permissions.
- No eval/Function/native binary loader or hidden staged payload found; shipped wasm/riv assets are HUD/city UI assets.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
2 flaggeddist/city/vendor/rive.wasmView file
•path = dist/city/vendor/rive.wasm
kind = wasm_module
sizeBytes = 1740592
magicHex = [redacted]
Medium
dist/setup.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @echomem/mcp@1.4.2
matchedIdentity = npm:QGVjaG9tZW0vbWNw:1.4.2
similarity = 0.939
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version.
dist/setup.jsView on unpkgFindings
1 Critical4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/setup.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduledist/city/vendor/rive.wasm
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @echomem/mcp@1.4.3.
See all versions of @echomem/mcp for other recorded verdicts.
- Review the evidence and your use of @echomem/mcp@1.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.