registry / @groundtruth-mcp/gt-mcp / 8.0.1

@groundtruth-mcp/gt-mcp@8.0.1

Enterprise-grade MCP server for live docs, best practices, code audit. Context7 alternative — 793+ libraries, evidence-verified answers (never generic), smart dispatch (use gt mcp), plain-text intent routing, telemetry, SSRF-hardened multi-source fetcher,

AI Security Review

scanned 12d ago · by lpm-firewall-ai

Source inspection found an install-time hook, but it only creates a local install identifier. The obfuscated flagged modules contain content-processing and page-fetching routines, with no concrete attack behavior established.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation triggers the postinstall hook; page fetching occurs during runtime requests.

Impact

The hook leaves a local identifier file; no credential theft, exfiltration, or destructive behavior was established.

Mechanism

The hook stores a random identifier in the user's home directory. The inspected runtime code extracts text and fetches candidate pages.

AI rationale

Evidence

~/.gt-mcp-install.key

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json runs a postinstall hook that invokes the package's own postinstall.mjs.
The hook creates a random local install ID in ~/.gt-mcp-install.key with restrictive file permissions and displays it; inspected code shows no network transfer.
The flagged extract module implements content extraction and truncation; the flagged fetch module fetches candidate pages and returns the first successful result.
No concrete attack behavior was identified in the inspected source.

Evidence against

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

ManifestNo manifest risk signals triggered.

scanned 153 file(s), 1.62 MB of source, external domains: 10play.github.io, a2a-protocol.org, actix.rs, adk.dev, ai-sdk.dev, ai.google.dev, airflow.apache.org, ajv.js.org, alamofire.github.io, alembic.sqlalchemy.org, alpinejs.dev, amqp-node.github.io, angular.dev, animejs.com, ant.design, api.github.com, api.jquery.com, appandflow.github.io, appwrite.io, argo-cd.readthedocs.io, ariakit.com, arktype.io, arrow.apache.org, aspire.dev, auth.pilcrowonpaper.com, authjs.dev, auto-animate.formkit.com, axiom.co, axios.rest, babeljs.io, bandit.readthedocs.io, base-ui.com, better-auth.com, bevy.org, biomejs.dev, black.readthedocs.io, bun.sh, caddyserver.com, capacitorjs.com, changesets.dev, cheatsheetseries.owasp.org, cheerio.js.org, clang.llvm.org, clerk.com, click.palletsprojects.com, clickhouse.com, cloud.google.com, cmake.org, cobra.dev, code.claude.com

Source & flagged code

5 flagged

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

1#!/usr/bin/env node L2: const a8_0x3a44c2=a8_0x5034;import*as a8_0x400256 from'node:module';function a8_0x5034(_0x5d8264,_0x43cc33){_0x5d8264=_0x5d8264-0x1dd;const _0x503445=a8_0x43cc();let _0x563cd7=_0x5...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

dist/utils/extract.jsView file

1function a118_0xe679(_0x5151f4,_0x44ec63){_0x5151f4=_0x5151f4-0x19f;const _0xe679ca=a118_0x44ec();let _0x275fd3=_0xe679ca[_0x5151f4];if(a118_0xe679['eUoHby']===undefined){var _0x2d...

High

Obfuscated Payload Loader

Source contains an obfuscated payload loader that reconstructs and executes hidden code.

dist/utils/extract.jsView on unpkg · L1

dist/services/deep-fetch-pages.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/services/deep-fetch-pages.js#virtual:normalized:round1View on unpkg

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1

Findings

3 High5 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighObfuscated Payload Loaderdist/utils/extract.js

HighSemantic Analysis Limiteddist/services/deep-fetch-pages.js#virtual:normalized:round1

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @groundtruth-mcp/gt-mcp@8.0.1.

See all versions of @groundtruth-mcp/gt-mcp for other recorded verdicts.

Review the evidence and your use of @groundtruth-mcp/gt-mcp@8.0.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-10 22:46:31.149Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.