registry / korean-law-mcp / 4.7.2

korean-law-mcp@4.7.2

법제처 42개 API → 9개 MCP 도구. 법령·판례·조례·조약 + 다단계 리서치(legal_research, 8 task) + 정밀분석(legal_analysis: 인용검증·판례생사·행위시법·영향그래프) + 시점 비교(time_travel) + 상황별 5단계 안내(action_plan) + 국세청 해석례(nts)

AI Security Review

scanned 17h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs korean-law-mcp setup and selects one or more clients.

Impact

Selected clients will launch this package through npx; entered API key is stored in the selected configuration.

Mechanism

Interactive MCP configuration registration plus legal-API requests.

Rationale

This is not malicious by source inspection, but its explicit setup command modifies AI-agent configuration and can retain an entered API key. Policy classifies this user-command configuration mutation as a warning rather than a publish block.

Evidence

package.jsonbuild/index.jsbuild/setup.jsbuild/lib/api-client.jsbuild/lib/fetch-with-retry.jsbuild/lib/external-https-proxy.js

Network endpoints2

www.law.go.kr/DRFtaxlaw.nts.go.kr/action.do

Decision evidence

public snapshot

korean-law-mcp@4.7.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code