registry / @planweave-ai/mcp / 0.2.1

@planweave-ai/mcp@0.2.1

Local HTTP MCP server for PlanWeave.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

An explicit tunnel workflow downloads a latest-release executable and can run it with a runtime API key. No install-time or import-time attack surface was found.

Static reason

No blocking static signals were detected.

Trigger

Caller explicitly invokes the tunnel downloader/configuration and run APIs.

Impact

A compromised or substituted upstream release could execute as the local user and receive the configured tunnel API key.

Mechanism

download and execute a remote tunnel-client binary

Rationale

No malicious automatic behavior is present, but the package provides an explicit remote-binary download-and-execute capability with an API key exposed to that child process. This is a real supply-chain execution risk warranting a warning rather than a block.

Evidence

package.jsondist/index.jsdist/tunnel/downloader.jsdist/tunnel/process.jsdist/tunnel/run.jsdist/tunnel/configStore.jsPLANWEAVE_HOME/config/mcp-tunnel/config.jsonPLANWEAVE_HOME/config/mcp-tunnel/tunnel-client/<release>/tunnel-client

Network endpoints2

api.github.com/repos/openai/tunnel-client/releases/latestgithub.com/openai/tunnel-client/releases/latest

@planweave-ai/mcp@0.2.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code