registry / @extenshi/mcp / 0.15.0
@extenshi/mcp@0.15.0
Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe postinstall network activity is limited to telemetry and is gated on recorded affirmative consent. The required source paths and relevant runtime telemetry configuration were inspected; no attack behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package as a dependency on a machine with telemetry consent recorded.
Impact
No confirmed attack surface; the observed telemetry is consent-gated and package-aligned.
Mechanism
The hook sends an install event with an anonymous install ID and coarse package and system metadata to the configured telemetry service.
AI rationale
The postinstall network activity is limited to telemetry and is gated on recorded affirmative consent. The required source paths and relevant runtime telemetry configuration were inspected; no attack behavior was found.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs on dependency installs, but sends only when the shared config records telemetry as true; its event contains an install ID and coarse package and system metadata.
- The install event goes to the package’s PostHog telemetry endpoint, matching the runtime telemetry configuration.
- The required development-guide file contains documentation URL definitions; no attack behavior was identified there.
Evidence against
- The manifest defines a postinstall hook, and the hook makes a network request; inspection found explicit consent gating and limited telemetry payloads.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
30import { checkForUpdate } from './update-check.js';
L31: const require = createRequire(import.meta.url);
L32: const pkg = require('../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L30Findings
2 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/development-guide.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @extenshi/mcp@0.15.0.
See all versions of @extenshi/mcp for other recorded verdicts.
- Review the evidence and your use of @extenshi/mcp@0.15.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.