registry / biel-search / 0.1.81

biel-search@0.1.81

Ask AI chatbot for technical documentation

AI Security Review

scanned 23h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User opens the Connect menu and selects/copies an MCP setup action.

Impact

A user may register the configured remote MCP endpoint with Claude, VS Code, or Cursor.

Mechanism

Explicit MCP command/deep-link generation

Rationale

The package is a browser chatbot and its API/WebSocket traffic is aligned with that function. Its explicit MCP setup capability warrants a warning under policy, but source shows no malware chain or unconsented lifecycle mutation.

Evidence

package.jsondist/collection/components/biel-input-options/biel-input-options.jsdist/collection/services/biel-service.jsdist/collection/services/biel-websocket-service.js

Network endpoints3

mcp.biel.ai/v2app.biel.ai/api/v1wss://app.biel.ai/ws/messages

Decision evidence

public snapshot

biel-search@0.1.81

AI Security Review

Decision evidence

Source & flagged code

Findings