registry / imprint-mcp / 0.5.1

imprint-mcp@0.5.1

Teach an AI agent how to use any website. Once. Records a real browser session + narration; generates a deterministic MCP tool plus a DOM-replay playbook fallback.

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 118 file(s), 1.64 MB of source, external domains: 127.0.0.1, api.pushover.net, bun.sh, console.anthropic.com, crontab.guru, docs.anthropic.com, flights.google.com, github.com, ntfy.sh, raw.githubusercontent.com, registry.npmjs.org, sandiego.discoverandgo.net, www.cursor.com, www.example.com, www.google.com, www.southwest.com

Source & flagged code

4 flagged

src/imprint/codex-cli-compile.tsView file

Lines 1-29typescript

1/**

2 * compile-agent driver for codex-cli.

3 *

4 * Codex CLI can run non-interactively with JSONL progress and stdio MCP

5 * servers. This mirrors the claude-cli compile path: expose the compile tools

6 * through the existing MCP server, let Codex drive the agent loop, and accept

7 * success only after the MCP done() tool writes the verified sentinel.

8 */

10import { type ChildProcess, spawn } from 'node:child_process';

11import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/imprint/codex-cli-compile.tsView on unpkg · L9

12import { isAbsolute as pathIsAbsolute, join as pathJoin } from 'node:path';

13import { type Span, context as otelContext } from '@opentelemetry/api';

14import type { AuthCliCompileMode } from './auth-compile-tools.ts';

15import { type SharedModuleManifestEntry, resolvePlanSliceFromFile } from './build-plan.ts';

16import type { CompileAgentProgress, CompileAgentResult } from './compile-agent-types.ts';

17import { formatCandidateContext, formatToolPlan } from './compile-agent-types.ts';

18import { preferredAgentModel } from './llm.ts';

19import { createLog } from './log.ts';

20import { COMPILE_SENTINELS } from './mcp-compile-server.ts';

21import type { SharedCompileContext, ToolCandidate } from './tool-candidates.ts';

22import {

23 endTraceSpan,

24 llmSpanAttributes,

25 resolveTraceTokenCount,

26 setSpanAttributes,

27 startTraceSpan,

28 traceJsonInputOutputAttributes,

29 traceLlmIoEnabled,

src/imprint/credential-store.tsView file

Lines 537-577typescript

537export function setBackendOverride(backend: CredentialBackend | null): void {

538 cachedBackendOverride = backend;

539 cachedBackend = null;

540}

541

542/** Reset the resolved backend so the next call re-resolves. Tests use this

src/imprint/replay-capture.tsView file

Lines 1-34typescript

1/**

2 * Replay a session in a fresh browser while capturing full request/response

3 * data for dual-pass diff analysis.

4 *

5 * Two replay strategies:

6 * 1. replayRawSession() — replays raw DOM events (click/type/navigate) from

7 * the original recording. Used for the site-level dual-pass before triage.

8 * 2. replayAndCapture() — replays a compiled playbook via playbook-runner.ts.

9 * Kept for potential future use but no longer part of the teach pipeline.

10 */

12import

src/imprint/doctor.tsView file

Lines 91-131typescript

91 ].filter((root): root is string => Boolean(root));

92 for (const root of cacheRoots) {

93 if (!existsSync(root)) continue;

Source & flagged code

4 flagged · loading source

src/imprint/codex-cli-compile.tsView file

9L10: import { type ChildProcess, spawn } from 'node:child_process'; L11: import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/imprint/codex-cli-compile.tsView on unpkg · L9

src/imprint/credential-store.tsView file

557// biome-ignore lint/suspicious/noExplicitAny: dynamic require L558: const mod = require('@napi-rs/keyring') as any; L559: if (!mod?.Entry || !mod?.findCredentials) return null;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/imprint/credential-store.tsView on unpkg · L557

src/imprint/replay-capture.tsView file

14package = imprint-mcp; repositoryIdentity = imprint; dependency = playwright L14: import { join as pathJoin } from 'node:path'; L15: import type { Browser, BrowserContext, Locator, Page } from 'playwright'; L16: import { createLog } from './log.ts';

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

src/imprint/replay-capture.tsView on unpkg · L14

src/imprint/doctor.tsView file

111'no chromium-* install under PLAYWRIGHT_BROWSERS_PATH, $HERMES_HOME/.cache/ms-playwright, ~/Library/Caches/ms-playwright, or ~/.cache/ms-playwright', L112: fix: 'run: bunx playwright install chromium (needed for stealth-fetch + playbook)', L113: }; ... L117: try { L118: return spawnSync('sh', ['-c', 'command -v Xvfb'], { stdio: 'ignore' }).status === 0; L119: } catch {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/imprint/doctor.tsView on unpkg · L111

Findings

4 High4 Medium5 Low

HighChild Processsrc/imprint/codex-cli-compile.ts

HighShell

HighCopied Package Dependency Bridgesrc/imprint/replay-capture.ts

HighRuntime Package Installsrc/imprint/doctor.ts

MediumDynamic Requiresrc/imprint/credential-store.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

src/imprint/codex-cli-compile.tsView file

Lines 1-29typescript

1/**

2 * compile-agent driver for codex-cli.

3 *

4 * Codex CLI can run non-interactively with JSONL progress and stdio MCP

5 * servers. This mirrors the claude-cli compile path: expose the compile tools

6 * through the existing MCP server, let Codex drive the agent loop, and accept

7 * success only after the MCP done() tool writes the verified sentinel.

8 */

10import { type ChildProcess, spawn } from 'node:child_process';

11import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from 'node:fs';

High

Child Process

Package source references child process execution.

src/imprint/codex-cli-compile.tsView on unpkg · L9

12import { isAbsolute as pathIsAbsolute, join as pathJoin } from 'node:path';

13import { type Span, context as otelContext } from '@opentelemetry/api';

14import type { AuthCliCompileMode } from './auth-compile-tools.ts';

15import { type SharedModuleManifestEntry, resolvePlanSliceFromFile } from './build-plan.ts';

16import type { CompileAgentProgress, CompileAgentResult } from './compile-agent-types.ts';

17import { formatCandidateContext, formatToolPlan } from './compile-agent-types.ts';

18import { preferredAgentModel } from './llm.ts';

19import { createLog } from './log.ts';

20import { COMPILE_SENTINELS } from './mcp-compile-server.ts';

21import type { SharedCompileContext, ToolCandidate } from './tool-candidates.ts';

22import {

23 endTraceSpan,

24 llmSpanAttributes,

25 resolveTraceTokenCount,

26 setSpanAttributes,

27 startTraceSpan,

28 traceJsonInputOutputAttributes,

29 traceLlmIoEnabled,

src/imprint/credential-store.tsView file

Lines 537-577typescript

537export function setBackendOverride(backend: CredentialBackend | null): void {

538 cachedBackendOverride = backend;

539 cachedBackend = null;

540}

541

542/** Reset the resolved backend so the next call re-resolves. Tests use this

src/imprint/replay-capture.tsView file

Lines 1-34typescript

1/**

2 * Replay a session in a fresh browser while capturing full request/response

3 * data for dual-pass diff analysis.

4 *

5 * Two replay strategies:

6 * 1. replayRawSession() — replays raw DOM events (click/type/navigate) from

7 * the original recording. Used for the site-level dual-pass before triage.

8 * 2. replayAndCapture() — replays a compiled playbook via playbook-runner.ts.

9 * Kept for potential future use but no longer part of the teach pipeline.

10 */

12import

src/imprint/doctor.tsView file

Lines 91-131typescript

91 ].filter((root): root is string => Boolean(root));

92 for (const root of cacheRoots) {

93 if (!existsSync(root)) continue;