registry / @extenshi/mcp / 0.7.0
@extenshi/mcp@0.7.0
Extenshi MCP server — bring the extension catalog (search, security, market research) and pre-publish scanning into your AI tools
AI Security Review
scanned 26d ago · by lpm-firewall-aiInspected source shows conditional, consent-gated install telemetry, ordinary docs fetching, and runtime telemetry with opt-out checks. The scanner’s lifecycle and network signals are explained by these package functions; no concrete attack surface was found.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing the package or starting the MCP server; the install ping requires an existing positive telemetry consent setting.
Impact
The observed network activity reports anonymous telemetry or retrieves public documentation; no credential exfiltration or hostile system mutation was established.
Mechanism
The postinstall hook posts package and machine-version metadata to PostHog after its guards pass. The docs search fetches public documentation, and runtime telemetry has opt-out checks.
AI rationale
Inspected source shows conditional, consent-gated install telemetry, ordinary docs fetching, and runtime telemetry with opt-out checks. The scanner’s lifecycle and network signals are explained by these package functions; no concrete attack surface was found.
Evidence
package.jsonscripts/postinstall.cjsdist/docs.jsdist/telemetry.jsdist/config.js
Network endpoints2
eu.i.posthog.comdocs.extenshi.io
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package runs a postinstall script, which gates its telemetry on a recorded positive consent setting.
- The install ping sends anonymous install metadata to a PostHog endpoint; its host can be configured through the environment.
- The docs module fetches documentation for its search function.
- Runtime telemetry has opt-out checks, and the service endpoints are compiled into the config module.
Evidence against
- The install hook skips non-node_modules installs and CI, and exits without sending unless config records telemetry as true.
- No credential harvesting, unrelated control-surface mutation, or payload execution was identified in the inspected source.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/index.jsView file
29import { checkForUpdate } from './update-check.js';
L30: const require = createRequire(import.meta.url);
L31: const pkg = require('../package.json');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/index.jsView on unpkg · L29Findings
2 High5 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSemantic Analysis Limiteddist/docs.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @extenshi/mcp@0.7.0.
See all versions of @extenshi/mcp for other recorded verdicts.
- Review the evidence and your use of @extenshi/mcp@0.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.