mcp-scraper@0.54.1
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNot malicious: no install-time hook or stealthy configuration write was found. Warn because the explicit setup can persist an MCP capability and use authenticated browser sessions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `mcp-scraper-cli agent install claude --apply` or starts the configured MCP server.
Impact
Adds a persistent agent tool entry and grants that tool access to the supplied service credential and user-authorized browser sessions.
Mechanism
Explicit Claude MCP registration and authenticated hosted MCP requests.
AI rationale
Not malicious: no install-time hook or stealthy configuration write was found. Warn because the explicit setup can persist an MCP capability and use authenticated browser sessions.
Evidence
package.jsondist/bin/mcp-scraper-cli.jsdist/bin/mcp-stdio-server.jsdist/chunk-HG3ZNOXB.js
Network endpoints1
mcpscraper.dev/mcp
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `agent install claude --apply` removes and re-adds its Claude MCP entry.
- Runtime sends its configured MCP Scraper API key to the selected hosted API endpoint.
- Package supports browser-profile workflows for user-authenticated sites.
Evidence against
- No preinstall, install, or postinstall lifecycle hook is declared.
- Agent configuration mutation is gated behind an explicit CLI command and `--apply`.
- The API endpoint is package-aligned (`mcpscraper.dev`) and is overrideable by environment.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
10 flaggeddist/chunk-AS345R6A.jsView file
18import { dirname, join } from "path";
L19: import { execFile } from "child_process";
L20: function workflowOutputBaseDir(outputDir) {
High
Child Process
Package source references child process execution.
dist/chunk-AS345R6A.jsView on unpkg · L18dist/server-GFS5L2NA.jsView file
176computeIssues,
L177: createPrivateArtifact,
L178: isPrivateIpAddress,
...
L433: ctaHeadingItalic: "real data.",
L434: ctaBody: "MCP Scraper gives your AI workflows the web intelligence they need \u2014 SERP data, People Also Ask harvests, page extraction, YouTube transcripts, and more. All via API...
L435: sections: [
...
L696: answer: `<strong>ChatGPT makes things up because its RLHF training consistently rewarded fluent, complete-sounding answers \u2014 and human raters often cannot tell in the moment w...
L697: source: "https://techcrunch.com/2026/05/05/openai-releases-gpt-5-5-instant-a-new-default-model-for-chatgpt/"
L698: }
...
L744: question: "what is the hallucination rate of Claude in 2026",
L745: answer: `<strong>Claude's hallucination rate in 2026 spans from 0% (Claude Opus
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
Findings
8 High5 Medium6 Low
HighChild Processdist/chunk-AS345R6A.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-GFS5L2NA.js
HighCredential Redirect Persistencedist/server-GFS5L2NA.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-GKIXS36E.js
HighPrevious Version Dangerous Deltadist/chunk-7MIOE5DQ.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/bin/api-server.cjs
MediumOversized Cli Entrypointdist/bin/api-server.cjs
Medium
Affected versions and remediation
This report applies to mcp-scraper@0.54.1.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.54.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.