registry / employed-mcp / 1.0.0

employed-mcp@1.0.0

MCP server + CLI for Employed by Guaq AI (jobs.guaqai.me) — thin Node launcher around the stdlib-only Python client, so `npx employed-mcp` / `npx employed` work with no manual download.

AI Security Review

scanned 22d ago · by lpm-firewall-ai

Inspected entrypoints and Python implementations support ordinary job-service client functionality. Configurable authentication and caller-directed exports do not establish an attack under the supplied policy.

Static reason

One or more suspicious static signals were detected.

Trigger

Explicit CLI invocation or an MCP tool request activates the relevant behavior.

Impact

Expected job queries and export files; no confirmed malicious impact was established.

Mechanism

Bundled Python sends authenticated API requests and writes exports to caller-selected destinations; no malicious execution or harvesting was found.

AI rationale

Network endpoints1

jobs.guaqai.me

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no installation lifecycle hooks or runtime dependencies.
bin/_run.js launches bundled Python with caller arguments when invoked.
py/guaq_client.py uses caller-supplied API credentials for ordinary authenticated API requests.
Job exports write downloaded data to the path supplied in the tool call.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.95 KB of source, external domains: python.org

Source & flagged code

6 flagged

bin/_run.jsView file

Lines 1-49javascript

1#!/usr/bin/env node

2"use strict";

3// Shared launcher for both bins: this package is a thin wrapper, not a rewrite.

4// guaq_mcp.py / guaq_cli.py / guaq_client.py are deliberately stdlib-only Python (see

5// their own docstrings) so anyone can `curl` them onto a locked-down machine with zero

6// installs — this npm package exists ONLY to make `npx employed-mcp` / `npx employed` fetch and

7// run that same code without the user finding and copying the raw files themselves.

8// Requires a Python 3 interpreter on PATH; it does not, and cannot, ship one.

9const { spawnSync } = require("child_process");

10const path = require("path");

11const fs = require("fs");

13function findPython() {

14 const candidates = process.platform === "win32"

15 ? ["python", "python3", "py"]

16 : ["python3", "python"];

17 for (const cmd of candidates) {

18 const probe = spawnSync(cmd, ["--version"], { stdio: "ignore" });

19 if (probe.status === 0) return cmd;

20 }

21 return null;

22}

24function run(scriptName) {

25 const python = findPython();

26 if (!python) {

27 process.stderr.write(

28 "employed-mcp: no Python 3 interpreter found on PATH.\n" +

29 "This package wraps a Python client (see the README) — install Python 3.8+ " +

30 "from https://python.org and make sure `python3` (or `python` on Windows) " +

31 "resolves, then try again.\n"

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/_run.jsView on unpkg · L8

32 );

33 process.exit(1);

34 }

35 const scriptPath = path.join(__dirname, "..", "py", scriptName);

36 if (!fs.existsSync(scriptPath)) {

37 process.stderr.write(`employed-mcp: bundled script missing: ${scriptPath}\n` +

38 "This is a packaging bug, not a config problem — please open an issue.\n");

39 process.exit(1);

40 }

41 const result = spawnSync(python, [scriptPath, ...process.argv.slice(2)], {

42 stdio: "inherit",

43 env: process.env,

44 });

45 process.exit(result.status === null ? 1 : result.status);

Low

Ai Review Evidence

bin/_run.js launches bundled Python with caller arguments when invoked.

bin/_run.jsView on unpkg · L41

46}

48module.exports = { run };

py/guaq_mcp.pyView file

•path = py/guaq_mcp.py kind = build_helper sizeBytes = 15460 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

py/guaq_mcp.pyView on unpkg

package.jsonView file

Lines 19-45json

19 "README.md"

20 ],

21 "engines": {

22 "node": ">=16"

23 },

24 "os": [

25 "darwin",

26 "linux"

py/guaq_client.pyView file

Lines 14-66text

14import os

15import time

16import urllib.error

17import urllib.parse

18import urllib.request

19from typing import Any, Iterator, Optional

21DEFAULT_BASE = os.getenv("GUAQ_API_BASE", "https://jobs.guaqai.me")

22USER_AGENT = "guaq-client/1.0"

25class GuaqError(Exception):

26 def __init__(self, message: str, status: int = 0, payload: Optional[dict] = None):

Source & flagged code

6 flagged · loading source

bin/_run.jsView file

8// Requires a Python 3 interpreter on PATH; it does not, and cannot, ship one. L9: const { spawnSync } = require("child_process"); L10: const path = require("path"); ... L13: function findPython() { L14: const candidates = process.platform === "win32" L15: ? ["python", "python3", "py"] ... L26: if (!python) { L27: process.stderr.write( L28: "employed-mcp: no Python 3 interpreter found on PATH.\n" + L29: "This package wraps a Python client (see the README) — install Python 3.8+ " + L30: "from https://python.org and make sure `python3` (or `python` on Windows) " + L31: "resolves, then try again.\n"

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/_run.jsView on unpkg · L8

41const result = spawnSync(python, [scriptPath, ...process.argv.slice(2)], { stdio: "inherit", env: process.env, }); process.exit(result.st

Low

Ai Review Evidence

bin/_run.js launches bundled Python with caller arguments when invoked.

bin/_run.jsView on unpkg · L41

py/guaq_mcp.pyView file

Findings

1 High3 Medium8 Low

HighSandbox Evasion Gated Capabilitybin/_run.js

MediumEnvironment Vars

MediumShips Build Helperpy/guaq_mcp.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/_run.js

LowAi Review Evidencepy/guaq_client.py

Affected versions and remediation

This report applies to employed-mcp@1.0.0.

See all versions of employed-mcp for other recorded verdicts.

Review the evidence and your use of employed-mcp@1.0.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-30 20:29:39.548Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.