registry / autojs6-mcp / 0.2.0

autojs6-mcp@0.2.0

MCP server for AutoJs6 remote control (DevPlugin protocol) and ADB workflows

AI Security Review

scanned 4h ago · by lpm-firewall-ai

MCP tool calls can execute arbitrary ADB command strings on the host and run or save supplied JavaScript on an AutoJs6 device. These capabilities are explicit and user-invoked; no automatic package attack surface was confirmed.

Static reason

No blocking static signals were detected.

Trigger

An MCP client invokes adb_command, run_script, save_script, run_project, or push_directory.

Impact

The invoking MCP client's privileges can run host ADB commands and modify or execute content on the selected Android device.

Mechanism

Caller-controlled ADB shell execution and AutoJs6 DevPlugin commands.

Rationale

The package is not malicious by static source evidence, but it intentionally exposes unrestricted host ADB shell execution through an MCP interface. This dangerous dual-use capability warrants a warning rather than a publication block.

Evidence

package.jsondist/index.jsdist/lib/command.jsdist/lib/devSocket.jsdist/tools/adbTools.jsdist/tools/scriptTools.jsdist/tools/projectTools.js

Network endpoints1

127.0.0.1

Decision evidence

public snapshot

AI called this at 94.0% confidence with false-positive risk.

autojs6-mcp@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code