registry / @paigy/mcp / 0.16.0

@paigy/mcp@0.16.0

Paigy MCP server — a voice inbox for your AI agents. Lets an agent notify a user and await their reply.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 194 KB of source, external domains: paigy.ai

Source & flagged code

1 flagged

dist/chunk-R3YGSGPX.jsView file

Lines 2247-2287javascript

2247 });

2248 } else if (typeof __require !== "undefined") {

2249 crypto = __require("crypto");

2250 if (crypto && crypto.randomBytes) {

2251 nacl6.setPRNG(function(x, n) {

2252 var i, v = crypto.randomBytes(n);

2253 for (i = 0; i < n; i++) x[i] = v[i];

2254 cleanup(v);

2255 });

2256 }

2257 }

2258 })();

2259 })(typeof module !== "undefined" && module.exports ? module.exports : self.nacl = self.nacl || {});

2260 }

2261});

2262var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";

2263var NETWORK_MSG = `Can't reach ${BACKEND_URL} \u2014 the connection was blocked or dropped before an HTTP response. If this agent runs in a sandboxed environment with a network allowlist (e.g. Claude Code on the web, CI), ask the user to add the Paigy domain (paigy.ai) to the environment's allowed domains, then retry.`;

2264var PROXY_ENV = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];

2265var agent;

2266async function proxy() {

2267 if (!PROXY_ENV.some((k) => process.env[k])) return void 0;

2268 return agent ??= new (await import("undici")).EnvHttpProxyAgent();

2269}

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunk-R3YGSGPX.jsView on unpkg · L2267

2270async function reach(url, init) {

2271 try {

2272 return await fetch(url, { ...init, dispatcher: await proxy() });

2273 } catch (e) {

2274 throw new Error(`${NETWORK_MSG} (${e?.message ?? String(e)})`);

2275 }

2276}

2277var ContextSchema = z.object({

2278 title: z.string().min(1).describe("One-line headline of what you need (required, non-empty)."),

2279 description: z.array(z.string().min(1)).min(1).describe("Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand.")

2280});

2281var OptionSchema = z.object({

2282 id: z.string(),

2283 label: z.string(),

2284 // .describe() flows into the MCP notify_user JSON schema (zodToJsonSchema), so

2285 // the constraints below are what an agent reads when deciding to use these.

2286 html: z.string().max(16384).describe(

2287 "Optional sandboxed HTML/CSS preview for a visual 'pick one' (shown in the option card). Untrusted-sandboxed: NO JavaScript, NO external network or images \u2014 inline CSS and data: URIs only; <=16KB. Use for layout/CSS mockups, tables, diffs. For a hosted image use `image` instead."

Source & flagged code

1 flagged · loading source

dist/chunk-R3YGSGPX.jsView file

2267package = @paigy/mcp; repositoryIdentity = paigy; dependency = undici L2267: if (!PROXY_ENV.some((k) => process.env[k])) return void 0; L2268: return agent ??= new (await import("undici")).EnvHttpProxyAgent(); L2269: }

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunk-R3YGSGPX.jsView on unpkg · L2267

Findings

1 High3 Medium4 Low

HighCopied Package Dependency Bridgedist/chunk-R3YGSGPX.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/chunk-R3YGSGPX.jsView file

Lines 2247-2287javascript

2247 });

2248 } else if (typeof __require !== "undefined") {

2249 crypto = __require("crypto");

2250 if (crypto && crypto.randomBytes) {

2251 nacl6.setPRNG(function(x, n) {

2252 var i, v = crypto.randomBytes(n);

2253 for (i = 0; i < n; i++) x[i] = v[i];

2254 cleanup(v);

2255 });

2256 }

2257 }

2258 })();

2259 })(typeof module !== "undefined" && module.exports ? module.exports : self.nacl = self.nacl || {});

2260 }

2261});

2262var BACKEND_URL = process.env.PAIGY_BACKEND_URL ?? "https://paigy.ai";

2264var PROXY_ENV = ["HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy"];

2265var agent;

2266async function proxy() {

2267 if (!PROXY_ENV.some((k) => process.env[k])) return void 0;

2268 return agent ??= new (await import("undici")).EnvHttpProxyAgent();

2269}

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/chunk-R3YGSGPX.jsView on unpkg · L2267

2270async function reach(url, init) {

2271 try {

2272 return await fetch(url, { ...init, dispatcher: await proxy() });

2273 } catch (e) {

2274 throw new Error(`${NETWORK_MSG} (${e?.message ?? String(e)})`);

2275 }

2276}

2277var ContextSchema = z.object({

2278 title: z.string().min(1).describe("One-line headline of what you need (required, non-empty)."),

2279 description: z.array(z.string().min(1)).min(1).describe("Semantic chunks of detail (each a standalone, non-empty piece). The user can select chunks to ask you to expand.")

2280});

2281var OptionSchema = z.object({

2282 id: z.string(),

2283 label: z.string(),

2284 // .describe() flows into the MCP notify_user JSON schema (zodToJsonSchema), so

2285 // the constraints below are what an agent reads when deciding to use these.

2286 html: z.string().max(16384).describe(