registry / korea-dart-mcp / 1.1.0

korea-dart-mcp@1.1.0

OpenDART 공시 원문과 재무제표를 5개 데이터 파이프 MCP 도구로 조회

AI Security Review

scanned 9h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `korea-dart-mcp setup` and selects one or more clients; runtime MCP tool calls query disclosures.

Impact

Selected AI clients will launch this MCP server and retain the supplied DART API key in their configuration.

Mechanism

interactive MCP registration plus OpenDART data retrieval

Rationale

No concrete malicious behavior was found. The explicit agent-config setup capability warrants a warning under the stated policy, rather than a block.

Evidence

package.jsonbuild/index.jsbuild/setup.jsbuild/lib/dart-client.jsbuild/lib/corp-code.jsbuild/tools/read-attachment.js

Network endpoints2

opendart.fss.or.kr/apidart.fss.or.kr

Decision evidence

public snapshot

korea-dart-mcp@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code