registry / mcp-scraper
mcp-scraper
Authenticated public client for hosted MCP Scraper tools and REST APIs
This report shows the evidence for mcp-scraper@0.103.0. 0 of 129 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe manifest has no lifecycle scripts, and the reviewed CLI sends its API key to the package’s own service for documented API operations. Configuration changes require an explicit --apply option; no malicious automatic behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
User invokes a CLI command; configuration changes require --apply.
Impact
No malicious credential transfer, unrelated automatic action, or install-time behavior was found in the inspected source.
Mechanism
The CLI sends its API key to the configured MCP Scraper API and records workflow artifact references there. It also supports explicit configuration and URL-opening actions.
AI rationale
The manifest has no lifecycle scripts, and the reviewed CLI sends its API key to the package’s own service for documented API operations. Configuration changes require an explicit --apply option; no malicious automatic behavior was identified.
Evidence
User-selected or default workflow output directory
Network endpoints2
mcpscraper.devregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines package entry points and CLI binaries but no lifecycle scripts.
- The CLI sends its API key to the MCP Scraper service endpoint; the host defaults to mcpscraper.dev and can be configured by the user.
- The memory sink posts workflow artifact references to the configured MCP Scraper service when a workflow remembers an artifact.
- Applying agent configuration requires the explicit --apply option.
- The CLI processes commands through its argument parser.
Evidence against
- The CLI can read an API key from the environment, but the inspected flows send it to the package’s own service.
- The CLI uses child processes for user-invoked actions such as opening a URL or applying configuration.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
...
L10: `):[`# ${n.label} MCP config`,l,n.exactConfig,"",`Continuation: ${n.continuation}`,`Rollback: ${n.rollback}`,...n.restartRequired?["",a]:[]].join(`
L11: `)}import{homedir as $e}from"node:os";import{join as Ee}from"node:path";function k(e){return e?.trim()||process.env.MCP_SCRAPER_OUTPUT_DIR?.trim()||Ee($e(),"Downloads","mcp-scraper...
L12: Fix: ${n.fix}`:"";return`[${r[n.status]}] ${n.label}: ${n.detail}${a}`}),"",`Recommended MCP command: npx ${e.recommendedConfig.args.join(" ")}`].join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L1Findings
7 High3 Medium2 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighCredential Exfiltrationdist/bin/mcp-scraper-cli.js
HighCommand Output Exfiltrationdist/bin/mcp-scraper-cli.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/bin/mcp-scraper-cli.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/mcp-scraper-cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to mcp-scraper@0.103.0.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of mcp-scraper@0.103.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.