registry / cesium-mcp-runtime / 1.143.2

cesium-mcp-runtime@1.143.2

Cesium MCP Runtime Server — AI Agent 通过 MCP 协议操控浏览器 Cesium

AI Security Review

scanned 8h ago · by lpm-firewall-ai

A user-invoked runtime HTTP server contains an unauthenticated arbitrary-fetch proxy. This creates SSRF exposure if a remote party can reach the listener.

Static reason

No blocking static signals were detected.

Trigger

Run `cesium-mcp-runtime`; request `GET /proxy?url=<target>`.

Impact

Access to network services reachable from the runtime host; no evidence of install-time compromise or exfiltration by the package.

Mechanism

Unvalidated URL fetch through a broadly bound HTTP server.

Rationale

Source inspection found no lifecycle execution or covert malicious chain. The unauthenticated arbitrary-fetch route is a real runtime SSRF risk, so the package should be warned rather than blocked as malware.

Evidence

package.jsondist/cli.jsdist/chunk-IGUWZWQF.js

Network endpoints2

GET /proxy?url=<user-controlled URL>nominatim.openstreetmap.org/search

Decision evidence

public snapshot

AI called this Suspicious at 93.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

cesium-mcp-runtime@1.143.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code