registry / @myspec/mcp-server / 0.1.1

@myspec/mcp-server@0.1.1

MySpec MCP server — exposes MySpec platform projects, files and attachments to MCP-aware clients via OAuth-authenticated access tokens.

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 126 KB of source, external domains: 127.0.0.1, app.myspec.dev, auth.myspec.dev

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync, realpathSync } from "fs";

5import { pathToFileURL } from "url";

7// src/auth/oauth-loopback.ts

8import http from "http";

9import { randomBytes } from "crypto";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

10import readline from "readline";

12// src/errors.ts

13var NeedsLoginError = class extends Error {

14 constructor(message = "Not authenticated. Run `npx @myspec/mcp-server login` to sign in.") {

15 super(message);

16 this.name = "NeedsLoginError";

17 }

18};

19var HttpStatusError = class extends Error {

20 status;

21 body;

22 constructor(status, body, message) {

23 const safeBody = redactSensitive(body);

24 super(message ?? `HTTP ${String(status)}: ${safeBody.slice(0, 200)}`);

25 this.name = "HttpStatusError";

26 this.status = status;

27 this.body = safeBody;

Lines 957-997javascript

957 * Makes a PUT request.

958 */

959 async put(path4, body, jwt, options) {

960 return this.request("PUT", path4, JSON.stringify(body), jwt, options);

961 }

962 /**

963 * Makes a PATCH request.

964 */

965

Lines 2614-2654javascript

2614 resolved = await realpath(joined);

2615 } catch (err) {

2616 if (opts.allowMissing && err.code === "ENOENT") {

2617 resolved = joined;

2618 } else {

2619 throw err;

2620 }

2621 }

Source & flagged code

3 flagged · loading source

dist/index.jsView file

2634import { join as join2, relative } from "path"; L2635: import { spawn } from "child_process"; L2636: import { z as z7 } from "zod";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2634

7// src/auth/oauth-loopback.ts L8: import http from "http"; L9: import { randomBytes } from "crypto"; ... L54: const logger = opts.logger ?? ((m) => { L55: process.stderr.write(m + "\n"); L56: }); L57: const state = randomBytes(32).toString("base64url"); L58: const { code } = await waitForOAuthCallback({ ... L285: function myspecDir() { L286: return path.join(os.homedir(), ".myspec"); L287: } ... L349: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

977isReady() { L978: return !!this.config.baseUrl; L979: } ... L2634: import { join as join2, relative } from "path"; L2635: import { spawn } from "child_process"; L2636: import { z as z7 } from "zod"; ... L3712: const pkgUrl = new URL("../package.json", import.meta.url); L3713: const raw = readFileSync(pkgUrl, "utf8"); L3714: const pkg = JSON.parse(raw);

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L977

Findings

4 High3 Medium4 Low

HighChild Processdist/index.js

HighShell

HighSandbox Evasion Gated Capabilitydist/index.js

HighRemote Agent Bridgedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync, realpathSync } from "fs";

5import { pathToFileURL } from "url";

7// src/auth/oauth-loopback.ts

8import http from "http";

9import { randomBytes } from "crypto";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

10import readline from "readline";

12// src/errors.ts

13var NeedsLoginError = class extends Error {

14 constructor(message = "Not authenticated. Run `npx @myspec/mcp-server login` to sign in.") {

15 super(message);

16 this.name = "NeedsLoginError";

17 }

18};

19var HttpStatusError = class extends Error {

20 status;

21 body;

22 constructor(status, body, message) {

23 const safeBody = redactSensitive(body);

24 super(message ?? `HTTP ${String(status)}: ${safeBody.slice(0, 200)}`);

25 this.name = "HttpStatusError";

26 this.status = status;

27 this.body = safeBody;

Lines 957-997javascript

957 * Makes a PUT request.

958 */

959 async put(path4, body, jwt, options) {

960 return this.request("PUT", path4, JSON.stringify(body), jwt, options);

961 }

962 /**

963 * Makes a PATCH request.

964 */

965

Lines 2614-2654javascript

2614 resolved = await realpath(joined);

2615 } catch (err) {

2616 if (opts.allowMissing && err.code === "ENOENT") {

2617 resolved = joined;

2618 } else {

2619 throw err;

2620 }

2621 }