registry / fractascan-mcp / 0.1.1

fractascan-mcp@0.1.1

Model Context Protocol server exposing Fracta scan tools (passive_scan, scan_repo, …)

AI Security Review

scanned 6d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked MCP security scanner with network and repo scanning capabilities aligned with its README and tool descriptions.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the fracta-mcp bin as an MCP server and invokes tools

Impact

Can contact user-supplied targets, read selected repository files, run gitleaks, and save local scan reports/state when tools are invoked

Mechanism

MCP scanner for URLs, configured targets, and local repositories

Rationale

Static inspection found powerful scanner behavior, but it is documented, user-invoked through MCP tools, and not delivered through install/import-time hooks or foreign agent-control-surface mutation. Optional LLM enrichment and report/state writes are controlled by runtime configuration and package-aligned.

Evidence

package.jsonREADME.mddist/index.jsdist/node-QWZVVGUH.js./fracta-state.db./fracta-reports/*.md./fracta-reports/*.json/tmp/fracta-gitleaks-*

Network endpoints1

api.anthropic.com

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no npm lifecycle hooks; only bin fracta-mcp -> dist/index.js
dist/index.js starts an MCP stdio server and exposes documented scan tools
Network fetches target user-supplied URLs with SSRF validation for passive_scan
scan_repo reads a user-supplied/local repo path and runs gitleaks if present
Runtime writes are package-aligned reports/state: fracta-reports and fracta-state.db
Anthropic API use is opt-in via FRACTA_LLM=1 and ANTHROPIC_API_KEY

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

Manifest

WildcardDependency

scanned 5 file(s), 647 KB of source, external domains: api.anthropic.com, app.seu-dominio.com, cve.mitre.org, cwe.mitre.org, datatracker.ietf.org, docs.anthropic.com, docs.expo.dev, docs.nestjs.com, docs.stripe.com, evil.com, exemplo.com.br, fracta.pro, github.com, meuapp.com.br, owasp.org, platform.claude.com, supabase.com, www.gov.br, www.prisma.io

Source & flagged code

5 flagged

dist/index.jsView file

Lines 521-561javascript

521}

522function analyzeCsp(policy) {

523 const d = parse(policy);

524 const issues = [];

525 const scriptSrc = d.get("script-src") ?? d.get("default-src");

526 const styleSrc = d.get("style-src") ?? d.get("default-src");

527 const has = (dir) => d.has(dir);

528 if (scriptSrc?.includes("'unsafe-inline'") && !scriptSrc.some((v) => v.startsWith("'nonce-") || v.startsWith("'sha"))) {

529 issues.push({

530 rule: "csp-unsafe-inline-script",

531 severity: "high",

532 title: "CSP com 'unsafe-inline' em script-src",

533 detail: "'unsafe-inline' autoriza QUALQUER script inline \u2014 inclusive o injetado por XSS. Isso anula a principal prote\xE7\xE3o do CSP: o header existe, mas contra XSS n\xE3o vale quase nada.",

534 recommendation: "Remova 'unsafe-inline' de script-src e use nonce por request ou hash dos scripts inline (com 'strict-dynamic')."

535 });

536 }

537 if (scriptSrc?.includes("'unsafe-eval'")) {

538 issues.push({

539 rule: "csp-unsafe-eval",

540 severity: "medium",

541 title: "CSP com 'unsafe-eval' em script-src",

542 detail: "'unsafe-eval' reabre eval()/new Function()/setTimeout(string) \u2014 amplia a superf\xEDcie de XSS.",

543 recommendation: "Remova 'unsafe-eval' e refatore o c\xF3digo que depende de eval/Function din\xE2micos."

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L541

544 });

545 }

546 if (!has("script-src") && !has("default-src")) {

547 issues.push({

548 rule: "csp-no-script-src",

549 severity: "medium",

550 title: "CSP sem script-src nem default-src",

551 detail: "Sem script-src (nem default-src como fallback), a origem dos scripts n\xE3o \xE9 restringida pela policy.",

552 recommendation: "Defina script-src 'self' (+ nonce/hash p/ inline) ou ao menos um default-src 'self'."

553 });

554 }

555 if (scriptSrc && (scriptSrc.includes("*") || scriptSrc.includes("https:") || scriptSrc.includes("http:"))) {

556 issues.push({

557 rule: "csp-broad-script-src",

558 severity: "medium",

559 title: "CSP com script-src muito amplo (* / https:)",

560 detail: "Permitir '*', 'https:' ou 'http:' em script-src deixa carregar script de quase qualquer origem \u2014 enfraquece muito a prote\xE7\xE3o.",

561 recommendation: "Liste apenas as origens confi\xE1veis; prefira nonce/hash + strict-dynamic a curingas."

Lines 1662-1702javascript

1662 }

1663 }

1664 async testRateLimit(scope, findings) {

1665 const authEndpoint = scope.target.auth?.endpoint;

1666 if (!authEndpoint) {

1667 findings.push({

1668 id: stableFindingId({ saas: scope.target.name, camada: this.category, rule: "rate-limit-not-tested" }),

1669 runId: scope.runId,

Lines 2401-2441javascript

2401 endpoint: path,

2402 evidence: `Avg v\xE1lido: ${avgValid.toFixed(0)}ms / Avg inexistente: ${avgFake.toFixed(0)}ms / \u0394=${delta.toFixed(0)}ms`,

2403 recommendation: "Sempre execute a verifica\xE7\xE3o de senha (bcrypt.compare) mesmo se o usu\xE1

Lines 4359-4399javascript

4359 category: this.category,

4360 camada: this.category,

4361 severity: "critical",

4362 title: `Prisma Studio exposto: ${path}`,

4363 description: `${path} parece servir o Prisma Studio publicamente. Studio d\xE1 acesso CRUD irrestrito ao banco \u2014 qualquer pessoa pode ler/editar/deletar dados.`,

•matchType = previous_version_dangerous_delta matchedPackage = fractascan-mcp@0.1.0 matchedIdentity = npm:ZnJhY3Rhc2Nhbi1tY3A:0.1.0 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/index.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

1682patternName = generic_password severity = medium line = 1682 matchedText = const bo..." };

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L1682

2421patternName = generic_password severity = medium line = 2421 matchedText = body: { ..." },

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L2421

4379patternName = generic_password severity = medium line = 4379 matchedText = password...99",

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L4379

541title: "CSP com 'unsafe-eval' em script-src", L542: detail: "'unsafe-eval' reabre eval()/new Function()/setTimeout(string) \u2014 amplia a superf\xEDcie de XSS.", L543: recommendation: "Remova 'unsafe-eval' e refatore o c\xF3digo que depende de eval/Function din\xE2micos."

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L541

Findings

1 High6 Medium6 Low

HighPrevious Version Dangerous Deltadist/index.js

MediumSecret Patterndist/index.js

MediumNetwork

MediumEnvironment Vars

MediumWildcard Dependency

MediumSecret Patterndist/index.js

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

5 flagged

dist/index.jsView file

Lines 521-561javascript

521}

522function analyzeCsp(policy) {

523 const d = parse(policy);

524 const issues = [];

525 const scriptSrc = d.get("script-src") ?? d.get("default-src");

526 const styleSrc = d.get("style-src") ?? d.get("default-src");

527 const has = (dir) => d.has(dir);

528 if (scriptSrc?.includes("'unsafe-inline'") && !scriptSrc.some((v) => v.startsWith("'nonce-") || v.startsWith("'sha"))) {

529 issues.push({

530 rule: "csp-unsafe-inline-script",

531 severity: "high",

532 title: "CSP com 'unsafe-inline' em script-src",

534 recommendation: "Remova 'unsafe-inline' de script-src e use nonce por request ou hash dos scripts inline (com 'strict-dynamic')."

535 });

536 }

537 if (scriptSrc?.includes("'unsafe-eval'")) {

538 issues.push({

539 rule: "csp-unsafe-eval",

540 severity: "medium",

541 title: "CSP com 'unsafe-eval' em script-src",

542 detail: "'unsafe-eval' reabre eval()/new Function()/setTimeout(string) \u2014 amplia a superf\xEDcie de XSS.",

543 recommendation: "Remova 'unsafe-eval' e refatore o c\xF3digo que depende de eval/Function din\xE2micos."

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L541

544 });

545 }

546 if (!has("script-src") && !has("default-src")) {

547 issues.push({

548 rule: "csp-no-script-src",

549 severity: "medium",

550 title: "CSP sem script-src nem default-src",

551 detail: "Sem script-src (nem default-src como fallback), a origem dos scripts n\xE3o \xE9 restringida pela policy.",

552 recommendation: "Defina script-src 'self' (+ nonce/hash p/ inline) ou ao menos um default-src 'self'."

553 });

554 }

555 if (scriptSrc && (scriptSrc.includes("*") || scriptSrc.includes("https:") || scriptSrc.includes("http:"))) {

556 issues.push({

557 rule: "csp-broad-script-src",

558 severity: "medium",

559 title: "CSP com script-src muito amplo (* / https:)",

560 detail: "Permitir '*', 'https:' ou 'http:' em script-src deixa carregar script de quase qualquer origem \u2014 enfraquece muito a prote\xE7\xE3o.",

561 recommendation: "Liste apenas as origens confi\xE1veis; prefira nonce/hash + strict-dynamic a curingas."

Lines 1662-1702javascript

1662 }

1663 }

1664 async testRateLimit(scope, findings) {

1665 const authEndpoint = scope.target.auth?.endpoint;

1666 if (!authEndpoint) {

1667 findings.push({

1668 id: stableFindingId({ saas: scope.target.name, camada: this.category, rule: "rate-limit-not-tested" }),

1669 runId: scope.runId,

Lines 2401-2441javascript

2401 endpoint: path,

2402 evidence: `Avg v\xE1lido: ${avgValid.toFixed(0)}ms / Avg inexistente: ${avgFake.toFixed(0)}ms / \u0394=${delta.toFixed(0)}ms`,

2403 recommendation: "Sempre execute a verifica\xE7\xE3o de senha (bcrypt.compare) mesmo se o usu\xE1

Lines 4359-4399javascript

4359 category: this.category,

4360 camada: this.category,

4361 severity: "critical",

4362 title: `Prisma Studio exposto: ${path}`,

4363 description: `${path} parece servir o Prisma Studio publicamente. Studio d\xE1 acesso CRUD irrestrito ao banco \u2014 qualquer pessoa pode ler/editar/deletar dados.`,

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg