registry / anima-use-google / 0.1.0

anima-use-google@0.1.0

MCP server that runs Google AI Mode searches via a Firefox sidecar extension using your own logged-in session.

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 34.4 KB of source, external domains: www.google.com

Source & flagged code

2 flagged

native-host/install-host.cjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Registers the native-messaging host with Firefox by writing the

4 * platform-specific manifest to the location Firefox scans for installed

5 * native messaging hosts, pointing at this repo's host.js.

6 *

7 * Windows: registry (HKCU\\Software\\Mozilla\\NativeMessagingHosts\\com.google.ai.search)

8 * macOS: ~/Library/ApplicationSupport/Mozilla/NativeMessagingHosts/com.google.ai.search.json

9 * Linux: ~/.mozilla/native-messaging-hosts/com.google.ai.search.json

10 *

11 * Re-run this any time you move the repo.

12 */

14const fs = require("node:fs");

15const path = require("node:path");

16const os = require("node:os");

18const HOST_NAME = "com.google.ai.search";

19const REPO_ROOT = path.resolve(__dirname, "..");

20const HOST_JS = path.join(REPO_ROOT, "native-host", "host.js");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

native-host/install-host.cjsView on unpkg · L18

22function buildManifest() {

23 // Firefox requires the host path executable on Unix; we point to a tiny

24 // launcher shell script so it works regardless of node location.

25 const launcher = path.join(__dirname, "run-host.sh");

26 return {

27 name: HOST_NAME,

28 description: "Anima-use-google native messaging bridge",

29 path: launcher,

30 type: "stdio",

31 allowed_extensions: ["google-ai-search@anima-use-google"],

32 };

33}

35function writeJson(file, obj) {

36 fs.mkdirSync(path.dirname(file), { recursive: true });

37 fs.writeFileSync(file, JSON.stringify(obj, null, 2) + "\n");

38}

native-host/run-host.shView file

•path = native-host/run-host.sh kind = build_helper sizeBytes = 84 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

native-host/run-host.shView on unpkg

Source & flagged code

2 flagged · loading source

native-host/install-host.cjsView file

18const HOST_NAME = "com.google.ai.search"; L19: const REPO_ROOT = path.resolve(__dirname, ".."); L20: const HOST_JS = path.join(REPO_ROOT, "native-host", "host.js"); ... L60: function installWindows() { L61: const { execSync } = require("node:child_process"); L62: const manifestPath = path.join( ... L83: const nodeBin = process.execPath; L84: const content = `#!/bin/sh L85: exec "${nodeBin}" "${HOST_JS}" "$@" ... L91: function main() { L92: const platform = process.platform; L93: let target;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

native-host/install-host.cjsView on unpkg · L18

native-host/run-host.shView file

•path = native-host/run-host.sh kind = build_helper sizeBytes = 84 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

native-host/run-host.shView on unpkg

Findings

4 Medium5 Low

MediumEnvironment Vars

MediumInstall Persistencenative-host/install-host.cjs

MediumShips Build Helpernative-host/run-host.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

native-host/install-host.cjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * Registers the native-messaging host with Firefox by writing the

4 * platform-specific manifest to the location Firefox scans for installed

5 * native messaging hosts, pointing at this repo's host.js.

6 *

7 * Windows: registry (HKCU\\Software\\Mozilla\\NativeMessagingHosts\\com.google.ai.search)

8 * macOS: ~/Library/ApplicationSupport/Mozilla/NativeMessagingHosts/com.google.ai.search.json

9 * Linux: ~/.mozilla/native-messaging-hosts/com.google.ai.search.json

10 *

11 * Re-run this any time you move the repo.

12 */

14const fs = require("node:fs");

15const path = require("node:path");

16const os = require("node:os");

18const HOST_NAME = "com.google.ai.search";

19const REPO_ROOT = path.resolve(__dirname, "..");

20const HOST_JS = path.join(REPO_ROOT, "native-host", "host.js");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

native-host/install-host.cjsView on unpkg · L18

22function buildManifest() {

23 // Firefox requires the host path executable on Unix; we point to a tiny

24 // launcher shell script so it works regardless of node location.

25 const launcher = path.join(__dirname, "run-host.sh");

26 return {

27 name: HOST_NAME,

28 description: "Anima-use-google native messaging bridge",

29 path: launcher,

30 type: "stdio",

31 allowed_extensions: ["google-ai-search@anima-use-google"],

32 };

33}

35function writeJson(file, obj) {

36 fs.mkdirSync(path.dirname(file), { recursive: true });

37 fs.writeFileSync(file, JSON.stringify(obj, null, 2) + "\n");

38}

native-host/run-host.shView file

•path = native-host/run-host.sh kind = build_helper sizeBytes = 84 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

native-host/run-host.shView on unpkg