integram-mcp@0.7.100
MCP server for Integram — connect AI assistants to your workspace via Model Context Protocol
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe automatic remote update and dependency installation form a concrete remote code execution capability under a configured Git checkout. The conditional trigger and absence of an install hook support warning rather than blocking.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the package as its command-line program from a Git checkout.
Impact
A changed configured remote can replace executable package code and cause dependency installation during normal program startup.
Mechanism
The entrypoint invokes Git pull, then invokes npm install after a changed revision, without an interactive confirmation.
AI rationale
The automatic remote update and dependency installation form a concrete remote code execution capability under a configured Git checkout. The conditional trigger and absence of an install hook support warning rather than blocking.
Evidence
index.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The executable entrypoint automatically checks its own directory for a Git repository and pulls its configured remote.
- After a changed pull, it runs npm install in that directory.
- The update routine runs immediately and hourly when the program is launched.
Evidence against
- Package metadata exposes the program through a bin entry and contains no install lifecycle hook.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourceindex.jsView file
3099L3100: import { execSync } from 'child_process';
L3101: import { realpathSync } from 'fs';
High
3115log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`);
L3116: try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {}
L3117: // Allow pending responses to drain before exit
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
index.jsView on unpkg · L31153108function tryAutoUpdate() {
try {
execSync('git rev-parse --git-dir', { cwd: __dirname, stdio: 'ignore' });
const before = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();
execSync('git pull --ff-only', { cwd: __dirname, stdio: 'ignore', timeout: 15000 });
const after = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();
if (before !== after) {
log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`);
try { exe
Medium
Ai Review Evidence
The executable entrypoint automatically checks its own directory for a Git repository and pulls its configured remote.
Findings
3 High4 Medium5 Low
HighChild Processindex.js
HighShell
HighRuntime Package Installindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidenceindex.js
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to integram-mcp@0.7.100.
See all versions of integram-mcp for other recorded verdicts.
- Review the evidence and your use of integram-mcp@0.7.100 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.