registry / @uuv/mcp-server / 0.26.0

@uuv/mcp-server@0.26.0

A Model Context Protocol (MCP) server for UUV - a solution to facilitate the writing and execution of E2E tests understandable by any human being(English or French) using cucumber(BDD) and cypress or playwright.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

The user-invoked installUuvDependency MCP tool has command injection. An untrusted packageName can alter the shell command executed in the supplied project directory.

Static reason

No blocking static signals were detected.

Trigger

An MCP client invokes installUuvDependency with a crafted packageName.

Impact

Arbitrary command execution with the MCP server's permissions.

Mechanism

Unsanitized string interpolation into execSync.

Rationale

Source inspection confirms a user-invoked command-injection vulnerability, not malicious package behavior. It should be warned and remediated by avoiding shell interpolation and constraining package names.

Evidence

dist/lib/services/dependencies.service.jsdist/lib/services/prompt-retriever.service.jsdist/lib/mcp-server-factory.jspackage.json

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

dist/lib/services/dependencies.service.js interpolates packageName into execSync shell command.
dist/lib/services/prompt-retriever.service.js accepts unrestricted packageName for the installer MCP tool.

@uuv/mcp-server@0.26.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code