registry  /  @funny-booth/personawrite-mcp  /  0.1.3

@funny-booth/personawrite-mcp@0.1.3

PersonaWrite（ペルソナライターAI）専用MCP: fine-tuningモデルでの記事生成・gpt-image-2画像生成・WordPress投稿・RAG参考資料

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings
Manifest
NoLicense
scanned 1 file(s), 25.5 KB of source, external domains: api.openai.com

Source & flagged code

2 flagged · loading source
dist/index.jsView file
1#!/usr/bin/env node L2: 'use strict';const _0x33e16f=_0x3899;(function(_0x36fdd3,_0x4842d1){const _0x558e14=_0x3899,_0x2fb778=_0x36fdd3();while(!![]){try{const _0x450d23=-parseInt(_0x558e14(0x1de))/0x1*(p...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1
1#!/usr/bin/env node L2: 'use strict';const _0x33e16f=_0x3899;(function(_0x36fdd3,_0x4842d1){const _0x558e14=_0x3899,_0x2fb778=_0x36fdd3();while(!![]){try{const _0x450d23=-parseInt(_0x558e14(0x1de))/0x1*(p...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

Findings

2 High4 Medium6 Low
HighObfuscated Payload Loaderdist/index.js
HighObfuscated
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License