registry  /  korean-law-mcp  /  4.6.5

korean-law-mcp@4.6.5

법제처 42개 API → 9개 MCP 도구. 법령·판례·조례·조약 + 다단계 리서치(legal_research, 8 task) + 정밀분석(legal_analysis: 인용검증·판례생사·행위시법·영향그래프) + 시점 비교(time_travel) + 상황별 5단계 안내(action_plan) + 국세청 해석례(nts)

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
No blocking static signals were detected.
Trigger
User runs `korean-law-mcp setup` or `npx korean-law-mcp setup` and selects clients.
Impact
Selected AI clients may later launch korean-law-mcp via npx with the entered LAW_OC key in env.
Mechanism
explicit MCP client config mutation for first-party server registration
Rationale
Static inspection found package-aligned law API clients and an explicit setup command that mutates AI-agent client configs, which LPM policy treats as warn-level agent capability risk rather than malicious absent stealth or exfiltration. No concrete malicious chain or unconsented npm install-time mutation was present.
Evidence
package.jsonbuild/index.jsbuild/cli.jsbuild/setup.jsbuild/lib/api-client.jsbuild/lib/fetch-with-retry.jsbuild/lib/law-url-config.jsbuild/server/http-server.jsbuild/tools/precedents.js~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%/Claude/claude_desktop_config.json~/.config/Claude/claude_desktop_config.json.mcp.json~/.cursor/mcp.json.vscode/mcp.json~/.codeium/windsurf/mcp_config.json~/.gemini/settings.json~/.zed/settings.json~/.config/zed/settings.json~/.gemini/antigravity/mcp_config.json
Network endpoints4
www.law.go.kr/DRFwww.law.go.kr/open.law.go.kr/LSO/openApi/guideResult.dotaxlaw.nts.go.kr/action.do

Decision evidence

public snapshot
AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • build/setup.js explicit setup wizard writes MCP server entries into Claude Desktop, Claude Code .mcp.json, Cursor, VS Code, Windsurf, Gemini CLI, Zed, and Antigravity configs.
  • build/setup.js stores user-provided LAW_OC in selected client config env and configures command npx -y korean-law-mcp.
  • package.json has prepare: husky but no preinstall/install/postinstall hook; setup is invoked only by korean-law-mcp setup.
Evidence against
  • build/index.js starts MCP stdio or HTTP server only when bin is run; no import-time file mutation beyond env reads.
  • build/lib/api-client.js network use is package-aligned Korean law API querying with LAW_OC/KOREAN_LAW_API_KEY.
  • build/lib/fetch-with-retry.js masks OC/apiKey values in URLs and adds law.go.kr User-Agent/Referer only for law.go.kr hosts.
  • build/server/http-server.js scrubs API keys from errors and gates shared-key quota; no credential exfiltration found.
  • No child_process exec/spawn, eval, Function, native loading, destructive filesystem actions, or hidden payload carrier found in inspected files.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 109 file(s), 821 KB of source, external domains: 0.0.0.0, glaw.scourt.go.kr, library.scourt.go.kr, open.law.go.kr, taxlaw.nts.go.kr, www.elis.go.kr, www.law.go.kr, www.moleg.go.kr

Source & flagged code

3 flagged · loading source
build/setup.jsView file
•Published source reference
Medium
Ai Review Evidence

build/setup.js explicit setup wizard writes MCP server entries into Claude Desktop, Claude Code .mcp.json, Cursor, VS Code, Windsurf, Gemini CLI, Zed, and Antigravity configs.

build/setup.jsView on unpkg
•Published source reference
Medium
Ai Review Evidence

build/setup.js stores user-provided LAW_OC in selected client config env and configures command npx -y korean-law-mcp.

build/setup.jsView on unpkg
package.jsonView file
•Published source reference
Medium
Suspicious Lifecycle Evidence

package.json has prepare: husky but no preinstall/install/postinstall hook; setup is invoked only by korean-law-mcp setup.

package.jsonView on unpkg

Findings

5 Medium5 Low
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencebuild/setup.js
MediumAi Review Evidencebuild/setup.js
MediumSuspicious Lifecycle Evidencepackage.json
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings