registry / @seomi/wp-mcp / 0.3.0

@seomi/wp-mcp@0.3.0

Universal installer for SEOMI MCP Abilities — wires WordPress projects to AI agents in one command (mu-plugin, MCP servers, Abilities API, MCP Adapter, ai-factory skill).

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 22 file(s), 213 KB of source, external domains: api.github.com, github.com, oauth.yandex.ru, raw.githubusercontent.com

Source & flagged code

4 flagged

src/lib/metrika-setup.mjsView file

Lines 1-38javascript

1/**

2 * Shared Yandex Metrika setup orchestration, reused by `init`, `update`, and

3 * `doctor --fix` so none of them duplicate the credentials → install → register

4 * flow.

5 *

6 * Split into three pieces:

7 * - `detectMetrikaState(cwd)` — non-interactive probe (used by update/doctor)

8 * - `askMetrikaCredentials()` — interactive prompts (used by init/update)

9 * - `setupMetrika(cwd, opts)` — the actual work: write .env, install the

10 * Python server + venv, register .mcp.json

11 *

12 * Secrets never touch `.mcp.json` (committed to git): the token lives only in

13 * `.claude/.env`, which the server reads at runtime.

14 */

16import { existsSync } from 'node:fs';

17import { readFile } from 'node:fs/promises';

18import { join } from 'node:path';

19import { spawn } from 'node:child_process';

20import { confirm, input, password, select } from '@inquirer/prompts';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/lib/metrika-setup.mjsView on unpkg · L18

21import { logger } from './logger.mjs';

22import { mergeEnv } from './env-writer.mjs';

23import { addServerEntry, buildMetrikaMcpConfig, readMcpJson } from './claude-mcp.mjs';

24import { installMetrikaMcp, venvPythonPath, CLIENT_SERVER_REL } from './metrika-mcp-installer.mjs';

26/** MCP server name used in the client's `.mcp.json`. */

27export const METRIKA_MCP_SERVER = 'yandex-metrika';

29/**

30 * Build the Yandex OAuth implicit-flow ("token") authorize URL for a Client ID.

31 *

32 * The Metrika cabinet only exposes Client ID / Client Secret — not a ready-made

33 * OAuth token. This URL lets the user grab an `access_token` straight from the

34 * browser redirect fragment (`#access_token=y0_…`) with no server round-trip.

35 *

36 * @param {string} clientId

37 * @returns {string}

38 */

•matchType = previous_version_dangerous_delta matchedPackage = @seomi/wp-mcp@0.2.0 matchedIdentity = npm:QHNlb21pL3dwLW1jcA:0.2.0 similarity = 0.955 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/lib/metrika-setup.mjsView on unpkg

mcp-servers/yandex-metrika/tests/test_segments.pyView file

•path = mcp-servers/yandex-metrika/tests/test_segments.py kind = payload_in_excluded_dir sizeBytes = 2698 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

mcp-servers/yandex-metrika/tests/test_segments.pyView on unpkg

•path = mcp-servers/yandex-metrika/tests/test_segments.py kind = build_helper sizeBytes = 2698 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

mcp-servers/yandex-metrika/tests/test_segments.pyView on unpkg

Source & flagged code

4 flagged · loading source

src/lib/metrika-setup.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code