registry / @enconvert/mcp / 0.2.0

@enconvert/mcp@0.2.0

MCP server for the Enconvert file conversion API — convert URLs to PDF, screenshot, or markdown, and convert document and image files, directly from Claude Code, Cursor, Windsurf, and Claude Desktop.

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs enconvert-mcp setup (or an AI client later starts the configured server).

Impact

Configured agents gain this package's network and local conversion capabilities.

Mechanism

User-invoked multi-client MCP configuration and API-backed conversion

Rationale

Source supports a warning for explicit AI-agent configuration mutation and a remotely capable MCP service, not a malicious block. No preinstall/install/postinstall behavior or concrete malicious chain was found.

Evidence

package.jsondist/index.jsREADME.md~/.enconvert/config.json~/.enconvert/installations.json~/.claude.json~/.codex/config.toml~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json

Network endpoints2

api.enconvert.comus.i.posthog.com

@enconvert/mcp@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code