registry / @kolbo/mcp / 1.31.0

@kolbo/mcp@1.31.0

Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 317 KB of source, external domains: api.kolbo.ai, app.kolbo.ai, fonts.googleapis.com, fonts.gstatic.com, images.pexels.com, kolbo-general-media.fra1.cdn.digitaloceanspaces.com, kolbo.ai, kolboai-development.ams3.cdn.digitaloceanspaces.com, kolboai-development.ams3.digitaloceanspaces.com, kolboai-production.ams3.cdn.digitaloceanspaces.com, kolboai-production.ams3.digitaloceanspaces.com, media-dev.kolbo.ai, media-staging.kolbo.ai, media.kolbo.ai, sites.kolbo.ai, www.w3.org

Source & flagged code

2 flagged

bin/kolbo-mcp.jsView file

Lines 1-16javascript

1#!/usr/bin/env node

3// `npx @kolbo/mcp install` → one-command keyless setup (configures the user's

4// agent). Anything else → run the MCP stdio server (the default).

5if (process.argv[2] === 'install') {

6 require('../src/install.js')

7 .run()

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kolbo-mcp.jsView on unpkg · L5

8 .then((code) => process.exit(code || 0))

9 .catch((err) => {

10 console.error('Kolbo install failed:', err && err.message ? err.message : err);

11 process.exit(1);

12 });

13} else {

14 require('../src/index.js');

15}

src/tools/_shared.jsView file

Lines 1-30javascript

1/* Shared helpers for MCP tools. No server.tool() registrations here.

2 *

3 * This file centralizes the URL-or-local-path → Buffer resolver used by

4 * every tool that accepts file-ish arguments (visual_dna, elements,

5 * first_last_frame, lipsync, video_from_video, transcription, media upload,

6 * future additions). It also owns the SSRF guard applied to any URL we

7 * fetch on the user's local machine.

8 *

9 * SSRF defense in depth:

10 * 1. Only http: / https: protocols.

11 * 2. Block IP literals in private / loopback / link-local / multicast /

Source & flagged code

2 flagged · loading source

bin/kolbo-mcp.jsView file

5if (process.argv[2] === 'install') { L6: require('../src/install.js') L7: .run()

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kolbo-mcp.jsView on unpkg · L5

src/tools/_shared.jsView file

10* 1. Only http: / https: protocols. L11: * 2. Block IP literals in private / loopback / link-local / multicast / L12: * reserved ranges (IPv4 and IPv6). ... L24: const path = require('path'); L25: const net = require('net'); L26: ... L171: } L172: const arrayBuf = await res.arrayBuffer(); L173: const buffer = Buffer.from(arrayBuf); ... L282: if (ab.byteLength > INLINE_IMG_MAX_BYTES) return null; L283: return { type: 'image', data: Buffer.from(ab).toString('base64'), mimeType: contentType }; L284: } catch (_) {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/tools/_shared.jsView on unpkg · L10

Findings

1 High4 Medium5 Low

HighCloud Metadata Accesssrc/tools/_shared.js

MediumDynamic Requirebin/kolbo-mcp.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

bin/kolbo-mcp.jsView file

Lines 1-16javascript

1#!/usr/bin/env node

3// `npx @kolbo/mcp install` → one-command keyless setup (configures the user's

4// agent). Anything else → run the MCP stdio server (the default).

5if (process.argv[2] === 'install') {

6 require('../src/install.js')

7 .run()

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/kolbo-mcp.jsView on unpkg · L5

8 .then((code) => process.exit(code || 0))

9 .catch((err) => {

10 console.error('Kolbo install failed:', err && err.message ? err.message : err);

11 process.exit(1);

12 });

13} else {

14 require('../src/index.js');

15}

src/tools/_shared.jsView file

Lines 1-30javascript

1/* Shared helpers for MCP tools. No server.tool() registrations here.

2 *

3 * This file centralizes the URL-or-local-path → Buffer resolver used by

4 * every tool that accepts file-ish arguments (visual_dna, elements,

5 * first_last_frame, lipsync, video_from_video, transcription, media upload,

6 * future additions). It also owns the SSRF guard applied to any URL we

7 * fetch on the user's local machine.

8 *

9 * SSRF defense in depth:

10 * 1. Only http: / https: protocols.

11 * 2. Block IP literals in private / loopback / link-local / multicast /