registry  /  evomcp  /  0.1.0

evomcp@0.1.0

Evolutionary MCP server — cheap-model fanout (best-of-N + repair chains) and scalar-fitness evolution, gated by dod-guard verification. Keeps token-burning out of the agent's main context.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
One or more suspicious static signals were detected.
Trigger
User/host explicitly configures the MCP server and calls `solve` or `evolve`.
Impact
Commands and destructive Git cleanup can affect the selected working directory; generated patches may modify it.
Mechanism
User-directed agent orchestration, shell verification, Git rollback, and patch application.
Rationale
The package exposes intentional, user-invoked coding-agent and Git automation with destructive potential in the caller-selected project. No install hook, hidden control-surface mutation, or concrete exfiltration behavior was found.
Evidence
package.jsondist/bundle.js.mcp.json.claude-plugin/plugin.json
Network endpoints2
127.0.0.1:3200/_proxy/statusapi.deepseek.com/anthropic

Decision evidence

public snapshot
AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `dist/bundle.js` MCP tools execute caller-supplied `verify_cmd`/`fitness_cmd` in caller-supplied `cwd`.
  • `dist/bundle.js` starts `claude` with prompts and DeepSeek proxy/API configuration.
  • `dist/bundle.js` evolution path runs `git checkout .` and `git clean -fd` in the user-selected project.
  • `dist/bundle.js` can apply generated patches via `git apply`.
Evidence against
  • `package.json` has only `prepublishOnly`; no install-time lifecycle hook.
  • `.mcp.json` only declares this package's explicit MCP server command.
  • Network use is limited to `127.0.0.1:3200` proxy health and DeepSeek Anthropic endpoint.
  • No source evidence of credential harvesting, stealth persistence, or unsolicited exfiltration.
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 738 KB of source, external domains: 127.0.0.1, api.deepseek.com, github.com, json-schema.org, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

3 flagged · loading source
dist/bundle.jsView file
21100// src/agent.ts L21101: import { spawn, execSync } from "node:child_process"; L21102: import * as path from "node:path";
High
Child Process

Package source references child process execution.

dist/bundle.jsView on unpkg · L21100
21090const json = serializeMessage(message); L21091: if (this._stdout.write(json)) { L21092: resolve2(); ... L21100: // src/agent.ts L21101: import { spawn, execSync } from "node:child_process"; L21102: import * as path from "node:path"; ... L21104: import * as os from "node:os"; L21105: var PROXY_URL = "http://127.0.0.1:3200"; L21106: var DEEPSEEK_ANTHROPIC_ENDPOINT = "https://api.deepseek.com/anthropic";
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bundle.jsView on unpkg · L21090
2941sourceCode = this.opts.code.process(sourceCode, sch); L2942: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2943: const validate = makeValidate(this, this.scope.get());
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/bundle.jsView on unpkg · L2941

Findings

3 High2 Medium6 Low
HighChild Processdist/bundle.js
HighShell
HighCommand Output Exfiltrationdist/bundle.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/bundle.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings