mcp-scraper@0.69.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains a broad, security-sensitive MCP and browser automation surface, including explicit user-scope agent configuration changes. The behavior is user-triggered and no concrete automatic malicious behavior was established, so it warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs mcp-scraper-cli agent install claude --apply or invokes browser features with profile saving or session-header forwarding enabled.
Impact
A user can grant this package durable AI-agent access and browser-session capabilities; misuse would depend on subsequent user or agent actions.
Mechanism
Explicit agent configuration mutation and browser-session automation.
AI rationale
The package contains a broad, security-sensitive MCP and browser automation surface, including explicit user-scope agent configuration changes. The behavior is user-triggered and no concrete automatic malicious behavior was established, so it warrants a warning rather than a block.
Evidence
dist/bin/mcp-scraper-cli.jsdist/chunk-62LEXS5O.jsdist/server-WCNYXILA.js
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit agent-install command can remove and add a user-scope Claude MCP server configured to run this package through npx.
- The browser component can save changes to a named remote browser profile and can replay session cookies when its caller enables session headers.
- The package ships a very large server bundle with browser automation and external-service functionality, making its privileged MCP capability surface unusually broad.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The Claude configuration mutation is gated behind the user invoking agent install with --apply and requires an API key.
- No source inspected showed credential exfiltration to an unrelated fixed endpoint, hidden persistence, or automatic installation-time execution.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
10 flaggeddist/server-WCNYXILA.jsView file
9203// src/services/site-architecture-auditor/python/graph-runner.ts
L9204: import * as childProcess from "child_process";
L9205: import * as path from "path";
High
Child Process
Package source references child process execution.
dist/server-WCNYXILA.jsView on unpkg · L9203285import {
L286: isPrivateIpAddress,
L287: loadHtmlDocument,
...
L513: ctaHeadingItalic: "real data.",
L514: ctaBody: "MCP Scraper gives your AI workflows the web intelligence they need \u2014 SERP data, People Also Ask harvests, page extraction, YouTube transcripts, and more. All via API...
L515: sections: [
...
L776: answer: `<strong>ChatGPT makes things up because its RLHF training consistently rewarded fluent, complete-sounding answers \u2014 and human raters often cannot tell in the moment w...
L777: source: "https://techcrunch.com/2026/05/05/openai-releases-gpt-5-5-instant-a-new-default-model-for-chatgpt/"
L778: }
...
L824: question: "what is the hallucination rate of Claude in 2026",
L825: answer: `<strong>Claude's hallucination rate in 2026 spans from 0% (Claude Opus 4.1 on AA-
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
dist/server-WCNYXILA.jsView on unpkg · L285Findings
8 High5 Medium6 Low
HighChild Processdist/server-WCNYXILA.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-WCNYXILA.js
HighCredential Redirect Persistencedist/server-WCNYXILA.js
HighCommand Output Exfiltrationdist/server-WCNYXILA.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-62LEXS5O.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/bin/api-server.cjs
MediumOversized Cli Entrypointdist/bin/api-server.cjs
Medium
Affected versions and remediation
This report applies to mcp-scraper@0.69.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.69.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.