registry / @elisym/mcp / 0.16.2

@elisym/mcp@0.16.2

⚠ Under review

MCP server for elisym - AI agent discovery, jobs, and payments

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 190 KB of source, external domains: api.devnet.solana.com, explorer.solana.com

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { LIMITS, DEFAULT_KIND_OFFSET, SolanaPaymentStrategy, makeCensor, DEFAULT_REDACT_PATHS, validateAgentName, exportKeyPairBytes, RELAYS, toDTag, JobWaitTimeoutError, attachmentsOf, decodeJobPayload, utf8ByteLength, formatAssetAmount, estimateNetworkBaseline, formatSol as formatSol$1, USDC_SOLANA_DEVNET, estimateSolFeeLamports, formatFeeBreakdown, resolveAssetFromPaymentRequest as resolveAssetFromPaymentRequest$1, parseAssetAmount, ElisymIdentity, ElisymClient, NATIVE_SOL, resolveKnownAsset, getProtocolProgramId, getProtocolConfig, assetKey, assetByKey, formatNetworkBaseline, KNOWN_ASSETS ...

3import { listAgents, createAgentDir, writeYamlInitial, writeExampleSkillTemplate, writeSecrets, resolveAgent, loadAgent, globalConfigPath, writeYaml, writeFileAtomic as writeFileAtomic$1 } from '@elisym/sdk/agent-store';

4import { createIrohTransport, loadGlobalConfig, writeGlobalConfig } from '@elisym/sdk/node';

5import { getBase58Encoder, getBase58Decoder, generateKeyPairSigner, createSolanaRpc, address, createSolanaRpcSubscriptions, sendAndConfirmTransactionFactory, getSignatureFromTransaction, pipe, createTransactionMessage, setTransactionMessageFeePayerSigner, setTransactionMessageLifetimeUsingBlockhash, appendTransactionMessageInstructions, signTransactionMessageWithSigners, createKeyPairSignerFromBytes, isAddress } from '@solana/kit';

6import { Command } from 'commander';

7import { generateSecretKey, nip19, getPublicKey } from 'nostr-tools';

8import { execFile } from 'node:child_process';

9import { realpath, readFile, stat, mkdir, rm, writeFile, rename, unlink } from 'node:fs/promises';

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

10import { tmpdir, platform, homedir } from 'node:os';

11import { dirname, join, resolve, isAbsolute, basename, relative } from 'node:path';

12import { promisify } from 'node:util';

13import { Server } from '@modelcontextprotocol/sdk/server/index.js';

14import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

15import { ListToolsRequestSchema, CallToolRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema } from '@modelcontextprotocol/sdk/types.js';

16import { z, ZodError } from 'zod';

17import { zodToJsonSchema } from 'zod-to-json-schema';

18import { readFileSync, mkdtempSync } from 'node:fs';

19import pino from 'pino';

20import { fileURLToPath } from 'node:url';

21import { randomBytes } from 'node:crypto';

Long lines were clipped for display.

Source & flagged code

2 flagged · loading source

dist/index.jsView file

1#!/usr/bin/env node L2: import { LIMITS, DEFAULT_KIND_OFFSET, SolanaPaymentStrategy, makeCensor, DEFAULT_REDACT_PATHS, validateAgentName, exportKeyPairBytes, RELAYS, toDTag, JobWaitTimeoutError, attachmen... L3: import { listAgents, createAgentDir, writeYamlInitial, writeExampleSkillTemplate, writeSecrets, resolveAgent, loadAgent, globalConfigPath, writeYaml, writeFileAtomic as writeFileAt... ... L7: import { generateSecretKey, nip19, getPublicKey } from 'nostr-tools'; L8: import { execFile } from 'node:child_process'; L9: import { realpath, readFile, stat, mkdir, rm, writeFile, rename, unlink } from 'node:fs/promises'; ... L37: validateAgentName(name); L38: const loaded = await loadAgent(name, process.cwd(), passphrase); L39: const solPayment = loaded.yaml.payments.find((entry) => entry.chain === "solana"); ... L92: function rpcUrlFor(_network) { L93: return "https://api.devnet.solana.com"; L94: }

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L1

1Trigger-reachable chain: manifest.main -> dist/index.js L1: #!/usr/bin/env node L2: import { LIMITS, DEFAULT_KIND_OFFSET, SolanaPaymentStrategy, makeCensor, DEFAULT_REDACT_PATHS, validateAgentName, exportKeyPairBytes, RELAYS, toDTag, JobWaitTimeoutError, attachmen... L3: import { listAgents, createAgentDir, writeYamlInitial, writeExampleSkillTemplate, writeSecrets, resolveAgent, loadAgent, globalConfigPath, writeYaml, writeFileAtomic as writeFileAt... ... L7: import { generateSecretKey, nip19, getPublicKey } from 'nostr-tools'; L8: import { execFile } from 'node:child_process'; L9: import { realpath, readFile, stat, mkdir, rm, writeFile, rename, unlink } from 'node:fs/promises'; ... L37: validateAgentName(name); L38: const loaded = await loadAgent(name, process.cwd(), passphrase); L39: const solPayment = loaded.yaml.payments.find((entry) => entry.chain === "solana"); ... L92: function rpcUrlFor(_network) { L93: return "https://api.devnet.solana.com"; L94: }

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

Findings

2 Critical2 Medium5 Low

CriticalWallet Draindist/index.js

CriticalTrigger Reachable Dangerous Capabilitydist/index.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

4import { createIrohTransport, loadGlobalConfig, writeGlobalConfig } from '@elisym/sdk/node';

6import { Command } from 'commander';

7import { generateSecretKey, nip19, getPublicKey } from 'nostr-tools';

8import { execFile } from 'node:child_process';

9import { realpath, readFile, stat, mkdir, rm, writeFile, rename, unlink } from 'node:fs/promises';

Critical

Wallet Drain

Source uses private key material to transfer cryptocurrency funds.

dist/index.jsView on unpkg · L1

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/index.jsView on unpkg · L1

10import { tmpdir, platform, homedir } from 'node:os';

11import { dirname, join, resolve, isAbsolute, basename, relative } from 'node:path';

12import { promisify } from 'node:util';

13import { Server } from '@modelcontextprotocol/sdk/server/index.js';

14import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

15import { ListToolsRequestSchema, CallToolRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema } from '@modelcontextprotocol/sdk/types.js';

16import { z, ZodError } from 'zod';

17import { zodToJsonSchema } from 'zod-to-json-schema';

18import { readFileSync, mkdtempSync } from 'node:fs';

19import pino from 'pino';

20import { fileURLToPath } from 'node:url';

21import { randomBytes } from 'node:crypto';

Long lines were clipped for display.