registry / @jieunmarslim/server-editable-slides / 0.2.13

@jieunmarslim/server-editable-slides@0.2.13

⚠ Under review

Model Context Protocol (MCP) client for Editable Slides Cloud

Static Scan Results

scanned 23d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1 file(s), 40.0 KB of source, external domains: docs.google.com, editable-slides-mcp-1056428002550.us-central1.run.app, oauth2.googleapis.com, www.googleapis.com

Source & flagged code

3 flagged

index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

3import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

4import { z } from 'zod';

5import fs from 'node:fs';

6import path from 'node:path';

7import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L6

9// Redirect console.log to stderr so stdout is reserved strictly for JSON-RPC

10console.log = (...args) => console.error(...args);

12const BASE_URL =

13 process.env.EDITABLE_SLIDES_URL ||

14 'https://editable-slides-mcp-1056428002550.us-central1.run.app';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L6

16// In-memory mapping of active conversion jobs to local file origins

17const activeJobs = new Map();

19function getAuthToken() {

20 if (process.env.EDITABLE_SLIDES_API_KEY) {

21 return process.env.EDITABLE_SLIDES_API_KEY;

22 }

23 try {

24 return execSync('gcloud auth print-access-token', {

25 stdio: ['ignore', 'pipe', 'ignore'],

26 })

index.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

index.js#virtual:normalized:round1View on unpkg

Source & flagged code

3 flagged · loading source

index.jsView file

@jieunmarslim/server-editable-slides@0.2.13

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code