asrai-mcp-apikey@1.5.2

Asrai crypto analysis MCP server — API key auth for ADVANCED plan users.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and the flagged skill-file writes occur through an explicitly invoked command. Inspected API-key use is directed to the package's Asrai service endpoints, with no confirmed malicious behavior found.

Static reason

No blocking static signals were detected.

Trigger

A user runs the install-skill command.

Impact

This adds the Asrai skill to the detected agent directory; the inspected code does not establish a confirmed attack surface.

Mechanism

The command checks for existing skill directories and copies the package's bundled skill files into a dedicated Asrai directory.

AI rationale

Evidence

bin/install-skill.jsskill/SKILL.mdskill/references/endpoints.md

Network endpoints2

apiasr.asrai.memcp-api.asrai.me

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes command-line entry points but defines no lifecycle scripts.
The skill installer copies bundled skill files only when explicitly run and detects an existing skills directory before installing.
The API client sends the supplied Asrai key to the package's Asrai service endpoints.
The bridge uses the supplied key to connect to the Asrai MCP service.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 86.3 KB of source, external domains: apiasr.asrai.me, github.com, mcp-api.asrai.me

Source & flagged code

5 flagged

bin/install-skill.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. #!/usr/bin/env node import { existssync, mkdirsync, copyfilesync } from 'fs'; import { join, dirname } from 'path'; import { homedir } from 'os'; import { fileurltopath } from 'url'; const __dirname = dirname(fileurltopath(import.meta.url)); const home = homedir(); const skill_src = join(__dirname, '..', 'skill', 'skill.md'); const endpoints_src = join(__dirname, '..', 'skill', 'references', 'endpoints.md');

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/install-skill.jsView on unpkg

48function installTo(destDir, label) { mkdirSync(join(destDir, 'references'), { recursive: true }); copyFileSync(SKILL_SRC, join(destDir, 'SKILL.md')); copyFileSync(ENDPOINTS_SRC, join(destDir, 'refere

Low

Ai Review Evidence

The skill installer copies bundled skill files only when explicitly run and detects an existing skills directory before installing.

bin/install-skill.jsView on unpkg · L48

Findings

1 High2 Medium7 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install-skill.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/install-skill.js

LowAi Review Evidencesrc/tools.js

LowAi Review Evidencebin/asrai-mcp-apikey.js

Affected versions and remediation

This report applies to asrai-mcp-apikey@1.5.2.

See all versions of asrai-mcp-apikey for other recorded verdicts.

Review the evidence and your use of asrai-mcp-apikey@1.5.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 03:14:22.110Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / asrai-mcp-apikey / 1.5.2

asrai-mcp-apikey@1.5.2

Asrai crypto analysis MCP server — API key auth for ADVANCED plan users.

AI Security Review

scanned 25d ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

A user runs the install-skill command.

Impact

This adds the Asrai skill to the detected agent directory; the inspected code does not establish a confirmed attack surface.

Mechanism

The command checks for existing skill directories and copies the package's bundled skill files into a dedicated Asrai directory.

AI rationale

Evidence

bin/install-skill.jsskill/SKILL.mdskill/references/endpoints.md

Network endpoints2

apiasr.asrai.memcp-api.asrai.me

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes command-line entry points but defines no lifecycle scripts.
The skill installer copies bundled skill files only when explicitly run and detects an existing skills directory before installing.
The API client sends the supplied Asrai key to the package's Asrai service endpoints.
The bridge uses the supplied key to connect to the Asrai MCP service.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 86.3 KB of source, external domains: apiasr.asrai.me, github.com, mcp-api.asrai.me

Source & flagged code

5 flagged

bin/install-skill.jsView file

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

bin/install-skill.jsView on unpkg

Low

Ai Review Evidence

The skill installer copies bundled skill files only when explicitly run and detects an existing skills directory before installing.

bin/install-skill.jsView on unpkg · L48

Findings

1 High2 Medium7 Low

HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install-skill.js

MediumNetwork

MediumEnvironment Vars

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/install-skill.js

LowAi Review Evidencesrc/tools.js

LowAi Review Evidencebin/asrai-mcp-apikey.js

Affected versions and remediation

This report applies to asrai-mcp-apikey@1.5.2.

See all versions of asrai-mcp-apikey for other recorded verdicts.

Review the evidence and your use of asrai-mcp-apikey@1.5.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 03:14:22.110Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.