registry / @finchagentic/mcp / 4.6.3
@finchagentic/mcp@4.6.3
The runtime layer for Agentic AI. Persistent memory, autonomous agents, and workflows that survive every session.
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.
Static reason
No blocking static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/local-vault.jsView file
68// vault handlers already catch and format that).
L69: const VAULT_DIR = path.join(os.homedir(), ".finch", "vault");
L70: // Local vault is enabled purely by config - it needs no server, just the
...
L89: const raw = fs.readFileSync(indexPath(cfg), "utf8");
L90: const parsed = JSON.parse(raw);
L91: return { entries: parsed.entries ?? {}, links: parsed.links ?? [] };
...
L175: agentId: input.agentId, tags, pinned: false, currentVersion: 1,
L176: createdAt: ts, updatedAt: ts, metadata: input.metadata,
L177: versions: [{ version: 1, commitMsg: input.commitMsg, agentId: input.agentId, size: Buffer.byteLength(input.content), createdAt: ts }],
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/local-vault.jsView on unpkg · L68dist/agent-loop.jsView file
30async function runAgent(userMessage, history, onToolCall) {
L31: const provider = process.env.FINCH_PROVIDER?.toLowerCase().trim();
L32: const bankrKey = process.env.BANKR_API_KEY;
...
L144: const sendTurn = async (messages, tools) => {
L145: const res = await fetch("https://api.anthropic.com/v1/messages", {
L146: method: "POST",
...
L151: },
L152: body: JSON.stringify({ model, max_tokens: 4096, system: SYSTEM_PROMPT, tools, messages }),
L153: signal: AbortSignal.timeout(90000),
...
L155: if (!res.ok) {
L156: const body = await res.text().catch(() => "");
L157: throw new Error(`Anthropic ${res.status}: ${body.slice(0, 300)}`);
Findings
4 High2 Medium5 Low
HighCredential Exfiltrationdist/agent-loop.js
HighCredential Redirect Persistencedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/agent-loop.js
HighSemantic Analysis Limiteddist/agent-loop.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/local-vault.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @finchagentic/mcp@4.6.3.
See all versions of @finchagentic/mcp for other recorded verdicts.
- Review the evidence and your use of @finchagentic/mcp@4.6.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.