registry / aidex-mcp / 2.2.2

aidex-mcp@2.2.2

MCP Server for persistent code indexing. Gives AI assistants (Claude, Gemini, Copilot, Cursor) instant access to your codebase. 50x less context than grep.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Install-time code modifies multiple third-party AI-client control surfaces and instruction files. It registers the package as an MCP server and injects persistent agent instructions without a user setup action.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall

Impact

Installed AI clients can launch the package and receive persistent instructions favoring its tools.

Mechanism

automatic multi-client MCP registration and AI instruction-file injection

Policy narrative

On installation, the postinstall script launches the package's setup command. Setup discovers installed AI clients, writes an aidex MCP entry into their configuration, invokes Claude's MCP CLI, and appends or replaces marked instruction blocks in Claude/Gemini instruction files. The injected text directs agents to prefer AiDex and automatically initialize it, creating an unconsented cross-client agent-control-surface change.

Rationale

This is concrete unconsented postinstall mutation of foreign, broad AI-agent control surfaces. It meets the firewall block policy even though no separate exfiltration chain was found.

Evidence

package.jsonscripts/postinstall.mjsbuild/index.jsbuild/commands/setup.js~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json~/.gemini/settings.json~/.gemini/GEMINI.md~/.claude/CLAUDE.md

aidex-mcp@2.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code