registry / @roarkanalytics/sdk-mcp / 3.31.0
@roarkanalytics/sdk-mcp@3.31.0
The official MCP Server for the Roark API
AI Security Review
scanned 1mo ago · by lpm-firewall-aiScanner labels came from the shared Stainless MCP template, including a leftover remote sandbox POST of the Roark token that the CLI now rejects in favor of local Deno. Source shows an official Roark MCP server with no install hooks and no unrelated exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user installs the package and runs the mcp-server binary or imports the MCP server library.
Impact
No confirmed malicious install, harvest, or exfiltration path; remaining network and code-execution behavior matches the documented Roark MCP product.
Mechanism
User-invoked official MCP Code Mode server
AI rationale
Scanner labels came from the shared Stainless MCP template, including a leftover remote sandbox POST of the Roark token that the CLI now rejects in favor of local Deno. Source shows an official Roark MCP server with no install hooks and no unrelated exfiltration.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json names this the official Roark MCP server and has only build/test/lint scripts, with bin mcp-server pointing at index.js.
- code-tool.js, code-tool.mjs, and src/code-tool.ts still contain a leftover remote handler that would POST the Roark bearer token to the Stainless code-tool API.
- instructions.js loads MCP server instructions with a GET to the Stainless instructions endpoint for roark-analytics.
- code-tool-worker.js evaluates agent-written TypeScript inside a Deno worker as the Code Mode execute tool.
- local-docs-search.js is an embedded MiniSearch index of Roark SDK method docs, not a hidden payload.
Evidence against
- There are no preinstall, install, or postinstall hooks and no writes to foreign AI-agent config files.
- The published CLI defaults code-execution-mode to local and throws if stainless-sandbox is requested, so the remote token POST is not the default bin path.
- Network hosts are api.roark.ai and api.stainless.com, which match the product and the Stainless codegen vendor, not an unrelated receiver.
- Scanner malware-similarity hits are the shared Stainless MCP template across those files, not a unique implant.
Source & flagged code
12 flagged · loading sourceinstructions.jsView file
•matchType = normalized_sha256
matchedPackage = plumery-mcp@3.9.0
matchedPath = instructions.js
matchedIdentity = npm:cGx1bWVyeS1tY3A:3.9.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
instructions.jsView on unpkg7exports.getInstructions = getInstructions;
L8: const promises_1 = __importDefault(require("fs/promises"));
L9: const logger_1 = require("./logger.js");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
instructions.jsView on unpkg · L7code-tool.jsView file
52Source sends the broad process environment to a literal external destination.
L52: interfaceType: 'PHONE',
L53: recordingUrl: 'https://example.com',
L54: startedAt: 'startedAt',
...
L155: },
L156: body: JSON.stringify({
L157: project_name: 'roark-analytics',
...
L166: }
L167: throw new Error(`${res.status}: ${res.statusText} error when trying to contact Code Tool server. Details: ${await res.text()}`);
L168: }
...
L214: // Check if deno is in PATH
L215: const { execSync, spawn } = await Promise.resolve().then(() => __importStar(require('node:child_process')));
L216: try {
Findings
2 Critical8 High5 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationcode-tool.js
CriticalManifest Confusionpackage.json
HighSemantic Analysis Limitedcode-tool.js#virtual:normalized:round1
HighKnown Malware Source Similaritycode-tool.js
HighKnown Malware Source Similaritycode-tool.mjs
HighKnown Malware Source Similaritysrc/code-tool.ts
HighKnown Malware Source Similaritycode-tool-worker.js
HighKnown Malware Source Similarityinstructions.js
HighKnown Malware Source Similaritylocal-docs-search.js
HighPrevious Version Dangerous Deltalocal-docs-search.js
MediumDynamic Requireinstructions.js
Affected versions and remediation
This report applies to @roarkanalytics/sdk-mcp@3.31.0.
See all versions of @roarkanalytics/sdk-mcp for other recorded verdicts.
- Review the evidence and your use of @roarkanalytics/sdk-mcp@3.31.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.