registry / @extenshi/mcp / 0.6.0
@extenshi/mcp@0.6.0
Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe automatic telemetry and home-directory persistence create a concrete privacy risk deserving a warning. The observed guards and absence of payload execution or broad mutation do not support a malware verdict.
Static reason
One or more suspicious static signals were detected.
Trigger
npm installation; runtime MCP startup and tool use.
Impact
Installation and usage metadata may leave the machine; no credential theft or broad control-surface modification was confirmed.
Mechanism
Conditional PostHog telemetry and persistent anonymous identifier.
AI rationale
The automatic telemetry and home-directory persistence create a concrete privacy risk deserving a warning. The observed guards and absence of payload execution or broad mutation do not support a malware verdict.
Evidence
scripts/postinstall.cjsdist/telemetry.js~/.extenshi/config.json
Network endpoints5
eu.i.posthog.combff.extenshi.ioscan.extenshi.iodocs.extenshi.ioregistry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Unknown with low false-positive risk.
Evidence for warning
- The package runs a postinstall script automatically.
- Postinstall reads and can update a home-directory Extenshi configuration file, then sends an installation event to PostHog.
- Runtime telemetry is enabled unless an opt-out condition is present and can create a persistent anonymous identifier.
Evidence against
- The postinstall network event is gated on an existing configuration value of telemetry being true.
- No self-dependency, shell execution, eval, or broad AI-client configuration mutation was found.
- The MCP server's network calls and artifact upload are tied to its stated catalog, documentation, scan, and publishing functions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
29import { checkForUpdate } from './update-check.js';
L30: const require = createRequire(import.meta.url);
L31: const pkg = require('../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L29Findings
2 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/docs.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @extenshi/mcp@0.6.0.
See all versions of @extenshi/mcp for other recorded verdicts.
- Review the evidence and your use of @extenshi/mcp@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.