registry / mcp-scraper / 0.101.1
mcp-scraper@0.101.1
Authenticated public client for hosted MCP Scraper tools and REST APIs
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection found no install lifecycle hooks or malicious behavior. The flagged command execution belongs to a user-invoked configuration flow, and the network helper sends workflow artifact metadata to the package service.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs a workflow or invokes agent installation with --apply.
Impact
No unauthorized credential transfer, command-output disclosure, or other attack was established.
Mechanism
Workflow runs send artifact metadata using the configured API key. The apply flow invokes Claude Code commands and uses their results to update or verify the MCP entry.
AI rationale
Source inspection found no install lifecycle hooks or malicious behavior. The flagged command execution belongs to a user-invoked configuration flow, and the network helper sends workflow artifact metadata to the package service.
Network endpoints1
mcpscraper.dev/memory/mcp-call
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI as a user-run binary and declares only commander as a runtime dependency; it has no lifecycle hooks.
- The inspected commander manifest shows development check scripts, and its ESM file only re-exports commander APIs.
- The CLI sends workflow artifact metadata to its service during workflow runs; this is package-aligned behavior.
- The CLI captures command output for its Claude configuration flow, which runs only when the user supplies --apply; inspection found no path sending that output to the network.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
...
L10: `):[`# ${n.label} MCP config`,l,n.exactConfig,"",`Continuation: ${n.continuation}`,`Rollback: ${n.rollback}`,...n.restartRequired?["",a]:[]].join(`
L11: `)}import{homedir as $e}from"node:os";import{join as Ee}from"node:path";function k(e){return e?.trim()||process.env.MCP_SCRAPER_OUTPUT_DIR?.trim()||Ee($e(),"Downloads","mcp-scraper...
L12: Fix: ${n.fix}`:"";return`[${r[n.status]}] ${n.label}: ${n.detail}${a}`}),"",`Recommended MCP command: npx ${e.recommendedConfig.args.join(" ")}`].join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L1Findings
7 High3 Medium2 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighCredential Exfiltrationdist/bin/mcp-scraper-cli.js
HighCommand Output Exfiltrationdist/bin/mcp-scraper-cli.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/bin/mcp-scraper-cli.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/mcp-scraper-cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to mcp-scraper@0.101.1.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.101.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.