registry / @feelingmindful/knowledge-graph / 0.6.0

@feelingmindful/knowledge-graph@0.6.0

Obsidian vault knowledge graph MCP server with semantic search, community detection, and wiki-link traversal

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The explicit MCP kg_create_node tool can write outside the configured vault because its path inputs are not constrained. No automatic install-time attack or exfiltration was established.

Static reason

No blocking static signals were detected.

Trigger

An MCP caller invokes kg_create_node with a traversal or absolute path in directory or title.

Impact

Arbitrary local markdown-suffixed file creation/overwrite-adjacent write outside the vault, subject to process permissions.

Mechanism

Unvalidated path construction followed by recursive mkdir and file write.

Rationale

The package appears aligned with its local knowledge-graph purpose and contains no malicious lifecycle or exfiltration behavior. However, the exposed write tool lacks vault-boundary validation, creating a concrete arbitrary local file-write vulnerability.

Evidence

package.jsondist/lib/writer.jsdist/mcp/index.jsdist/lib/embedder.jsREADME.mddist/lib/config.js

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

dist/lib/writer.js: createNode joins unvalidated directory and title into write path.

@feelingmindful/knowledge-graph@0.6.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code