registry / @jieunmarslim/server-editable-slides / 0.2.4

@jieunmarslim/server-editable-slides@0.2.4

Model Context Protocol (MCP) client for Editable Slides Cloud

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1 file(s), 24.2 KB of source, external domains: editable-slides-mcp-1056428002550.us-central1.run.app

Source & flagged code

2 flagged

index.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

2import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';

3import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

4import { z } from 'zod';

5import fs from 'node:fs';

6import path from 'node:path';

7import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L6

9// Redirect console.log to stderr so stdout is reserved strictly for JSON-RPC

10console.log = (...args) => console.error(...args);

12const BASE_URL =

13 process.env.EDITABLE_SLIDES_URL ||

14 'https://editable-slides-mcp-1056428002550.us-central1.run.app';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

index.jsView on unpkg · L6

16// In-memory mapping of active conversion jobs to local file origins

17const activeJobs = new Map();

19function getAuthToken() {

20 if (process.env.EDITABLE_SLIDES_API_KEY) {

21 return process.env.EDITABLE_SLIDES_API_KEY;

22 }

23 try {

24 return execSync('gcloud auth print-access-token', {

25 stdio: ['ignore', 'pipe', 'ignore'],

26 })

Source & flagged code

2 flagged · loading source

index.jsView file

6import path from 'node:path'; L7: import { execSync } from 'node:child_process'; L8:

@jieunmarslim/server-editable-slides@0.2.4

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code