registry / AI-agent control-surface risk / mcp-efficiency-engine
mcp-efficiency-engine
Motor de orquestacion capability-centric v2 para agentes MCP con optimizacion always-on.
This report shows the evidence for mcp-efficiency-engine@0.1.21. 17 of 22 known versions are blocked or flagged. The newest version, 0.1.28, is allowed. See all versions.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package performs unconsented postinstall mutation of a consuming project’s broad AI-agent control surface, including deletion of existing agent configuration. This meets the firewall block boundary regardless of the absence of direct exfiltration.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
npm installation executes postinstall.
Impact
A dependency install can alter MCP tool execution and delete pre-existing host AI-agent configuration.
Mechanism
automatic host-project scaffold, agent-config replacement, cleanup, and hook installation
Policy narrative
Installing the package invokes bin/install-host.js with --postinstall. Its default target is the npm initiating directory, where it copies bundled .vscode/mcp.json defining executable MCP servers, removes .github/agents and .github/skills, and configures a post-commit hook. These foreign host-project agent-control mutations occur automatically, without user confirmation.
AI rationale
The package performs unconsented postinstall mutation of a consuming project’s broad AI-agent control surface, including deletion of existing agent configuration. This meets the firewall block boundary regardless of the absence of direct exfiltration.
Evidence
package.jsonbin/install-host.js.vscode/mcp.jsonscripts/setup/install-project-hooks.ps1.githooks/post-commit.github/agents.github/skills
Decision evidence
public snapshotAI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.
Evidence for policy risk
- package.json runs postinstall without user command.
- bin/install-host.js defaults target to INIT_CWD/process.cwd and copies scaffold entries.
- Postinstall copies .vscode/mcp.json, configuring six MCP server commands in the host project.
- Postinstall deletes host .github/agents and .github/skills by default.
- Postinstall sets git core.hooksPath and installs a post-commit hook.
- Postinstall may run gitnexus or npx --yes gitnexus analyze in a host Git repo.
Evidence against
- No direct credential-exfiltration path found in inspected lifecycle code.
- LangSmith export is disabled by default in telemetry/config.json and requires configuration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
HighEntropyStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/install-host.js --postinstall
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./bin/install-host.js --postinstall
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/install-host.jsView file
28"tooling",
L29: "AGENTS.md",
L30: "ARCHITECTURE.md",
...
L195: function ensureDir(dirPath) {
L196: fs.mkdirSync(dirPath, { recursive: true });
L197: }
...
L210:
L211: fs.copyFileSync(sourcePath, targetPath);
L212: return { copied: true, skipped: false, reason: "copied" };
Critical
Ai Agent Control Hijack
Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
bin/install-host.jsView on unpkg · L284const path = require("node:path");
L5: const { spawnSync } = require("node:child_process");
L6:
High
Child Process
Package source references child process execution.
bin/install-host.jsView on unpkg · L4332{ cmd: "pwsh", args: ["-NoProfile", "-Command", "gitnexus analyze"] },
L333: { cmd: "powershell", args: ["-NoProfile", "-Command", "gitnexus analyze"] },
L334: { cmd: "npx", args: ["--yes", "gitnexus", "analyze"] },
L335: { cmd: "pwsh", args: ["-NoProfile", "-Command", "npx --yes gitnexus analyze"] },
L336: { cmd: "powershell", args: ["-NoProfile", "-Command", "npx --yes gitnexus analyze"] },
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/install-host.jsView on unpkg · L332scripts/context/build-repomix.ps1View file
•path = scripts/context/build-repomix.ps1
kind = build_helper
sizeBytes = 64
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
scripts/context/build-repomix.ps1View on unpkgFindings
1 Critical3 High4 Medium3 Low
CriticalAi Agent Control Hijackbin/install-host.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/install-host.js
HighRuntime Package Installbin/install-host.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperscripts/context/build-repomix.ps1
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to mcp-efficiency-engine@0.1.21.
The versions list below shows the verdict for each recorded version.
- Avoid installing mcp-efficiency-engine@0.1.21. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.
Versions
22 known versions0.1.28latestUnknown—AllowUnder ReviewOct 22, 2026, 6:06 PM0.1.26Unknown—AllowUnder ReviewOct 22, 2026, 1:38 PM0.1.25Unknown—AllowUnder ReviewOct 19, 2026, 11:29 PM0.1.24Unknown—AllowUnder ReviewOct 19, 2026, 10:14 PM0.1.22Unknown—AllowUnder ReviewOct 19, 2026, 10:55 AM0.1.21shownMaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 11:20 PM0.1.20MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 4:44 PM0.1.19MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 2:54 PM0.1.18MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 2:10 PM0.1.17MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 1:45 PM0.1.16MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 8, 2026, 11:32 AM0.1.15MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 7, 2026, 6:48 PM0.1.14MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 7, 2026, 3:10 PM0.1.13MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 7, 2026, 12:21 PM0.1.12MaliciousSoft block: AI-agent control surfaceBlockPublishedAug 3, 2026, 10:29 PM0.1.10MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 15, 2026, 10:43 PM0.1.6MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 12, 2026, 9:48 PM0.1.5MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 11, 2026, 9:16 PM0.1.3MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 11, 2026, 1:54 PM0.1.2MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 11, 2026, 1:29 PM0.1.1MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 10, 2026, 2:02 PM0.1.0MaliciousSoft block: AI-agent control surfaceBlockPublishedJul 8, 2026, 10:54 PM