@okostream/mcp@0.18.0

Control OKO Stream webinars from Claude, Codex, and other MCP clients.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The inspected entrypoint and sensitive operations are consistent with the package's MCP functionality. Static inspection found no concrete malicious behavior warranting a warning or block.

Static reason

No blocking static signals were detected.

Trigger

Starting the MCP server and invoking its tools activates the inspected functionality.

Impact

Tools can modify authenticated webinar resources; no malicious credential harvesting, shell execution, or agent configuration mutation was established.

Mechanism

Configured credentials authenticate service requests; explicit directory settings enable restricted local image reads.

AI rationale

The inspected entrypoint and sensitive operations are consistent with the package's MCP functionality. Static inspection found no concrete malicious behavior warranting a warning or block.

Network endpoints1

us-central1-okostreamcore.cloudfunctions.net/exchangeApiKey

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares the MCP entrypoint and has no automatic install hooks or runtime self-dependency.
dist/server.js registers MCP tools and connects a standard input/output transport.
Authentication sends the configured OKO_API_KEY to the OKO exchange service by default; endpoint overrides are explicit client configuration.
Local image reads are disabled by default and restricted to configured directories after resolving file paths.

Evidence against

Behavioral surface

Source

Eval

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 0 file(s), 256 KB of source, external domains: raw.githubusercontent.com

Oversized source lightweight scan

dist/server.js4.50 MB file, sampled 256 KB

EvalHighEntropyStringsUrlStrings

Source & flagged code

6 flagged

dist/server.jsView file

1232// validation function arguments L1233: data: new codegen_1.Name("data"), L1234: // data passed to validation function ... L2259: id = normalizeId(id); L2260: return resolver.resolve(baseId, id); L2261: } ... L3122: for (i = 0; i < input.length; i++) { L3123: code = input[i].charCodeAt(0); L3124: if (code === 48) { ... L9700: L9701: // node_modules/@grpc/grpc-js/package.json L9702: var require_package = __commonJS({

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/server.jsView on unpkg · L1232

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server.jsView on unpkg

•path = dist/server.js kind = oversized_source_file sizeBytes = 4715077 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

Findings

2 High3 Medium7 Low

HighBrowser Session Account Hijackdist/server.js

HighSemantic Analysis Limiteddist/server.js

MediumOversized Source Filedist/server.js

MediumOversized Cli Entrypointdist/server.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/server.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @okostream/mcp@0.18.0.

See all versions of @okostream/mcp for other recorded verdicts.

Review the evidence and your use of @okostream/mcp@0.18.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-30 14:29:32.183Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / @okostream/mcp / 0.18.0

@okostream/mcp@0.18.0

Control OKO Stream webinars from Claude, Codex, and other MCP clients.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The inspected entrypoint and sensitive operations are consistent with the package's MCP functionality. Static inspection found no concrete malicious behavior warranting a warning or block.

Static reason

No blocking static signals were detected.

Trigger

Starting the MCP server and invoking its tools activates the inspected functionality.

Impact

Tools can modify authenticated webinar resources; no malicious credential harvesting, shell execution, or agent configuration mutation was established.

Mechanism

Configured credentials authenticate service requests; explicit directory settings enable restricted local image reads.

AI rationale

The inspected entrypoint and sensitive operations are consistent with the package's MCP functionality. Static inspection found no concrete malicious behavior warranting a warning or block.

Network endpoints1

us-central1-okostreamcore.cloudfunctions.net/exchangeApiKey

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json declares the MCP entrypoint and has no automatic install hooks or runtime self-dependency.
dist/server.js registers MCP tools and connects a standard input/output transport.
Authentication sends the configured OKO_API_KEY to the OKO exchange service by default; endpoint overrides are explicit client configuration.
Local image reads are disabled by default and restricted to configured directories after resolving file paths.

Evidence against

Behavioral surface

Source

Eval

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 0 file(s), 256 KB of source, external domains: raw.githubusercontent.com

Oversized source lightweight scan

dist/server.js4.50 MB file, sampled 256 KB

EvalHighEntropyStringsUrlStrings

Source & flagged code

6 flagged

dist/server.jsView file

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/server.jsView on unpkg · L1232

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server.jsView on unpkg

•path = dist/server.js kind = oversized_source_file sizeBytes = 4715077 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

Findings

2 High3 Medium7 Low

HighBrowser Session Account Hijackdist/server.js

HighSemantic Analysis Limiteddist/server.js

MediumOversized Source Filedist/server.js

MediumOversized Cli Entrypointdist/server.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/server.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LowSuspicious Lifecycle Evidencepackage.json

Affected versions and remediation

This report applies to @okostream/mcp@0.18.0.

See all versions of @okostream/mcp for other recorded verdicts.

Review the evidence and your use of @okostream/mcp@0.18.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-30 14:29:32.183Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.