registry  /  @funny-booth/personawrite-mcp  /  0.1.1

@funny-booth/personawrite-mcp@0.1.1

PersonaWrite（ペルソナライターAI）専用MCP: fine-tuningモデルでの記事生成・gpt-image-2画像生成・WordPress投稿・RAG参考資料

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
DynamicRequireEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedTrivialUrlStrings
Manifest
NoLicense
scanned 1 file(s), 19.5 KB of source, external domains: api.openai.com

Source & flagged code

2 flagged · loading source
dist/index.jsView file
1#!/usr/bin/env node L2: 'use strict';const _0x183ef4=_0x3b54;(function(_0x1c3023,_0x255e5d){const _0x3567b2=_0x3b54,_0x3fd8ac=_0x1c3023();while(!![]){try{const _0xb2025b=-parseInt(_0x3567b2(0x206))/0x1+pa...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1
1#!/usr/bin/env node L2: 'use strict';const _0x183ef4=_0x3b54;(function(_0x1c3023,_0x255e5d){const _0x3567b2=_0x3b54,_0x3fd8ac=_0x1c3023();while(!![]){try{const _0xb2025b=-parseInt(_0x3567b2(0x206))/0x1+pa...
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

Findings

2 High4 Medium6 Low
HighObfuscated Payload Loaderdist/index.js
HighObfuscated
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License