registry / @modootoday/datalab-extension-mcp / 1.2.0

@modootoday/datalab-extension-mcp@1.2.0

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `datalab-extension-mcp install` or invokes the default MCP adapter.

Impact

An AI host can gain the package's browser-extension tool capability after user-approved setup.

Mechanism

Explicit MCP host registration and loopback browser-extension relay.

Rationale

No concrete malicious chain or unconsented lifecycle mutation was found. The explicit installer changes AI-agent control surfaces, so it warrants a warn verdict under the stated policy.

Evidence

package.jsondist/cli.jsdist/dist-6EYUWYJ4.jsdist/chunk-H7BBF4G2.js~/.cursor/mcp.json~/.codex/config.toml

Network endpoints1

127.0.0.1:8765/mcp

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.

@modootoday/datalab-extension-mcp@1.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code