registry / @vndkubi/codegraph-mcp / 1.2.0

@vndkubi/codegraph-mcp@1.2.0

CodeGraph v2 MCP proxy and persistent semantic indexer for Copilot/Codex agents

AI Security Review

scanned 19d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The package is a user-invoked CodeGraph/TokenOpt MCP and CLI that indexes local workspaces, serves repository-context tools, and optionally runs commands only through explicit full-mode/tool use.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs codegraph/tokenopt CLI or starts the MCP server; no registry install-time trigger confirmed.

Impact

Local .codegraph database/artifacts and TokenOpt cache/report files may be created during normal use; no credential harvesting or exfiltration observed.

Mechanism

Local semantic indexing, MCP tool serving, optional policy-wrapped command execution.

Rationale

Source inspection shows powerful primitives are aligned with the package's documented MCP/CLI purpose and require explicit user or full-profile MCP invocation. No install-time execution, hidden network exfiltration, credential harvesting, persistence, or AI-agent control-surface mutation was found.

Evidence

package.jsondist/cli.jsdist/v2/mcp/proxy.jsdist/tokenopt/mcp.jsdist/tokenopt/exec.jsdist/tokenopt/config.jsdist/tokenopt/observability.jsdist/v2/query/ci-review.jsdist/v2/paths.jsexamples/generate-repo-atlas.ps1.codegraph/graph.sqlite.codegraph/source-cache.codegraph/artifacts

@vndkubi/codegraph-mcp@1.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code