registry / mal-mcp / 0.5.0

mal-mcp@0.5.0

MyAnimeList MCP server — Jikan-powered reads plus official MAL personal-list management

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEval

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 636 KB of source, external domains: api.jikan.moe, api.myanimelist.net, github.com, json-schema.org, myanimelist.net, raw.githubusercontent.com

Source & flagged code

4 flagged

dist/index.jsView file

78`);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),x4(r)}clear(){this._buffer=void 0}};function x4(t)... L79: `}var ql=class{constructor(e=Iw.stdin,r=Iw.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ll,this._started=!1,this._ondata=i=>{this._readBuffer.append(i),this.processRea... L80: Steps: call search_anime to resolve its mal_id, then get_anime_recommendations, and optionally get_anime for the top picks. Present 5-8 recommendations with a one-line reason each,...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L78

72L73: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of t.seen.entries()){let s=a[1];if(e===a[0]){o(a);continue}if(t.external){let u=t.exter... L74: ]))`;continue}else if(i[c]==="$"){n+=`($|(?=[\r ... L78: `);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),x4(r)}clear(){this._buffer=void 0}};function x4(t)... L79: `}var ql=class{constructor(e=Iw.stdin,r=Iw.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ll,this._started=!1,this._ondata=i=>{this._readBuffer.append(i),this.processRea... L80: Steps: call search_anime to resolve its mal_id, then get_anime_recommendations, and optionally get_anime for the top picks. Present 5-8 recommendations with a one-li

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L72

Source & flagged code

4 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code