registry / @myspec/mcp-server / 0.1.2

@myspec/mcp-server@0.1.2

MySpec MCP server — exposes MySpec platform projects, files and attachments to MCP-aware clients via OAuth-authenticated access tokens.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 151 KB of source, external domains: 127.0.0.1, app.myspec.dev, auth.myspec.dev

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync, realpathSync } from "fs";

5import { pathToFileURL } from "url";

7// src/auth/oauth-loopback.ts

8import http from "http";

9import { randomBytes } from "crypto";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

10import readline from "readline";

12// src/errors.ts

13var NeedsLoginError = class extends Error {

14 constructor(message = "Not authenticated. Run `npx @myspec/mcp-server login` to sign in.") {

15 super(message);

16 this.name = "NeedsLoginError";

17 }

18};

19var HttpStatusError = class extends Error {

20 status;

21 body;

22 constructor(status, body, message) {

23 const safeBody = redactSensitive(body);

24 super(message ?? `HTTP ${String(status)}: ${safeBody.slice(0, 200)}`);

25 this.name = "HttpStatusError";

26 this.status = status;

27 this.body = safeBody;

Lines 960-1000javascript

960 * Makes a PUT request.

961 */

962 async put(path4, body, jwt, options) {

963 return this.request("PUT", path4, JSON.stringify(body), jwt, options);

964 }

965 /**

966 * Makes a PATCH request.

967 */

968

Lines 3216-3256javascript

3216 resolved = await realpath(joined);

3217 } catch (err) {

3218 if (opts.allowMissing && err.code === "ENOENT") {

3219 resolved = joined;

3220 } else {

3221 throw err;

3222 }

3223 }

Source & flagged code

3 flagged · loading source

dist/index.jsView file

3236import { join as join2, relative } from "path"; L3237: import { spawn } from "child_process"; L3238: import { z as z17 } from "zod";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L3236

7// src/auth/oauth-loopback.ts L8: import http from "http"; L9: import { randomBytes } from "crypto"; ... L54: const logger = opts.logger ?? ((m) => { L55: process.stderr.write(m + "\n"); L56: }); L57: const state = randomBytes(32).toString("base64url"); L58: const { code } = await waitForOAuthCallback({ ... L285: function myspecDir() { L286: return path.join(os.homedir(), ".myspec"); L287: } ... L349: try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

980isReady() { L981: return !!this.config.baseUrl; L982: } ... L3236: import { join as join2, relative } from "path"; L3237: import { spawn } from "child_process"; L3238: import { z as z17 } from "zod"; ... L4354: const pkgUrl = new URL("../package.json", import.meta.url); L4355: const raw = readFileSync(pkgUrl, "utf8"); L4356: const pkg = JSON.parse(raw);

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L980

Findings

4 High3 Medium4 Low

HighChild Processdist/index.js

HighShell

HighSandbox Evasion Gated Capabilitydist/index.js

HighRemote Agent Bridgedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3// src/index.ts

4import { readFileSync, realpathSync } from "fs";

5import { pathToFileURL } from "url";

7// src/auth/oauth-loopback.ts

8import http from "http";

9import { randomBytes } from "crypto";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L7

10import readline from "readline";

12// src/errors.ts

13var NeedsLoginError = class extends Error {

14 constructor(message = "Not authenticated. Run `npx @myspec/mcp-server login` to sign in.") {

15 super(message);

16 this.name = "NeedsLoginError";

17 }

18};

19var HttpStatusError = class extends Error {

20 status;

21 body;

22 constructor(status, body, message) {

23 const safeBody = redactSensitive(body);

24 super(message ?? `HTTP ${String(status)}: ${safeBody.slice(0, 200)}`);

25 this.name = "HttpStatusError";

26 this.status = status;

27 this.body = safeBody;

Lines 960-1000javascript

960 * Makes a PUT request.

961 */

962 async put(path4, body, jwt, options) {

963 return this.request("PUT", path4, JSON.stringify(body), jwt, options);

964 }

965 /**

966 * Makes a PATCH request.

967 */

968

Lines 3216-3256javascript

3216 resolved = await realpath(joined);

3217 } catch (err) {

3218 if (opts.allowMissing && err.code === "ENOENT") {

3219 resolved = joined;

3220 } else {

3221 throw err;

3222 }

3223 }