registry / @extenshi/mcp / 0.12.0
@extenshi/mcp@0.12.0
Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools
AI Security Review
scanned 24d ago · by lpm-firewall-aiInspected source shows a postinstall hook that requires previously recorded telemetry consent before sending limited install metadata. The flagged distribution files show documentation links and landing-page rendering, with no concrete attack behavior identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installing the package; telemetry runs only when the recorded Extenshi configuration has telemetry set to true and no opt-out or CI guard applies.
Impact
No confirmed attack surface was established; the observed network request is telemetry, not a credential or file exfiltration path.
Mechanism
The hook sends package and runtime metadata with an anonymous identifier to PostHog, then exits.
AI rationale
Inspected source shows a postinstall hook that requires previously recorded telemetry consent before sending limited install metadata. The flagged distribution files show documentation links and landing-page rendering, with no concrete attack behavior identified.
Evidence
package.jsonscripts/postinstall.cjsdist/development-guide.jsdist/landing-sections.js
Network endpoints1
eu.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The install hook is registered as postinstall, but its network activity is gated on recorded telemetry consent and exits when consent is absent.
- When enabled, the hook sends install metadata and an anonymous identifier to its configured PostHog host; the source does not show credential collection.
- The flagged development guide defines links to Extenshi documentation and tools.
- The flagged landing-sections file renders caller-provided landing form data.
Evidence against
- No inspected source establishes credential theft, malicious persistence, destructive behavior, or an attack on an AI-agent control surface.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
30import { checkForUpdate } from './update-check.js';
L31: const require = createRequire(import.meta.url);
L32: const pkg = require('../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L30Findings
3 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/development-guide.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/landing-sections.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @extenshi/mcp@0.12.0.
See all versions of @extenshi/mcp for other recorded verdicts.
- Review the evidence and your use of @extenshi/mcp@0.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.