registry / mcp-scraper / 0.102.1
mcp-scraper@0.102.1
Authenticated public client for hosted MCP Scraper tools and REST APIs
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe scanner's credential, network, and process-execution signals correspond to authenticated CLI features: workflow reporting transmits artifact metadata, and configuration changes require an explicit apply action. The inspected source does not establish hidden credential transfer or command-output exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the CLI or explicitly requests agent configuration with --apply.
Impact
No unconsented credential disclosure, command-output exfiltration, or other harmful effect was established.
Mechanism
Workflow reporting sends an artifact path and metadata to the configured memory endpoint; agent setup invokes Claude Code only behind the explicit apply option.
AI rationale
The scanner's credential, network, and process-execution signals correspond to authenticated CLI features: workflow reporting transmits artifact metadata, and configuration changes require an explicit apply action. The inspected source does not establish hidden credential transfer or command-output exfiltration.
Network endpoints1
mcpscraper.dev
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the flagged file as the mcp-scraper-cli executable.
- The inspected Commander dependency provides a standard ESM export wrapper; its listed scripts are development checks.
- Workflow artifact reporting sends the artifact path and metadata to the memory endpoint, not the artifact contents.
- The memory endpoint defaults to mcpscraper.dev; the API helper also defaults to that service and accepts an explicitly configured endpoint.
- Agent configuration changes require --apply, are limited to Claude Code, and require an API key.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
...
L10: `):[`# ${n.label} MCP config`,l,n.exactConfig,"",`Continuation: ${n.continuation}`,`Rollback: ${n.rollback}`,...n.restartRequired?["",a]:[]].join(`
L11: `)}import{homedir as $e}from"node:os";import{join as Ee}from"node:path";function k(e){return e?.trim()||process.env.MCP_SCRAPER_OUTPUT_DIR?.trim()||Ee($e(),"Downloads","mcp-scraper...
L12: Fix: ${n.fix}`:"";return`[${r[n.status]}] ${n.label}: ${n.detail}${a}`}),"",`Recommended MCP command: npx ${e.recommendedConfig.args.join(" ")}`].join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L1Findings
7 High3 Medium2 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighCredential Exfiltrationdist/bin/mcp-scraper-cli.js
HighCommand Output Exfiltrationdist/bin/mcp-scraper-cli.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/bin/mcp-scraper-cli.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/mcp-scraper-cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to mcp-scraper@0.102.1.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.102.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.