registry / mcp-scraper / 0.73.8
mcp-scraper@0.73.8
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiHigh scanner labels are product-aligned dual-use: first-party MCP setup, ChatGPT/Claude visibility capture, ffmpeg replay tools, and public IP checks. With no install lifecycle and no covert exfil path, the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
The package does not run on npm install. Users start it with mcp-scraper, mcp-scraper-cli, or an MCP client.
Impact
No unconsented credential theft, destructive action, or foreign agent hijack was established.
Mechanism
No confirmed malicious attack surface
AI rationale
High scanner labels are product-aligned dual-use: first-party MCP setup, ChatGPT/Claude visibility capture, ffmpeg replay tools, and public IP checks. With no install lifecycle and no covert exfil path, the package is clean.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- A user-run CLI can spawn the claude command to add or replace this package as a Claude Code MCP server when --apply is passed.
- Hosted browser tools capture ChatGPT or Claude prompt fan-out from an already logged-in session.
- Harvest code looks up the browser session IP on public geo services, and the server talks to named vendor APIs.
- child_process is used to run ffprobe/ffmpeg and to open checkout URLs with OS helpers.
Evidence against
- package.json has no preinstall, install, or postinstall script, so npm install does not run this package.
- Agent config changes happen only from the explicit mcp-scraper-cli agent install command and register this same first-party server.
- OAuth allowlists, Nango, billing, and chatgpt.com/claude.ai capture match a commercial MCP scraper, not a hidden dropper.
- Process execution is ffmpeg/ffprobe for replay annotation and platform URL openers, not a generic shell payload.
- The stdio server requires an API key and defaults to https://mcpscraper.dev.
Behavioral surface
ChildProcess
Source & flagged code
8 flaggeddist/chunk-DDEMQWGT.jsView file
16036// src/mcp/replay-annotator.ts
L16037: import { execFile } from "child_process";
L16038: import { mkdtemp, rm, stat, writeFile } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-DDEMQWGT.jsView on unpkg · L16036dist/server-FYL32M22.jsView file
341import {
L342: isPrivateIpAddress,
L343: loadHtmlDocument,
...
L566: ctaHeadingItalic: "real data.",
L567: ctaBody: "MCP Scraper gives your AI workflows the web intelligence they need \u2014 SERP data, People Also Ask harvests, page extraction, YouTube transcripts, and more. All via API...
L568: sections: [
...
L829: answer: `<strong>ChatGPT makes things up because its RLHF training consistently rewarded fluent, complete-sounding answers \u2014 and human raters often cannot tell in the moment w...
L830: source: "https://techcrunch.com/2026/05/05/openai-releases-gpt-5-5-instant-a-new-default-model-for-chatgpt/"
L831: }
...
L877: question: "what is the hallucination rate of Claude in 2026",
L878: answer: `<strong>Claude's hallucination rate in 2026 spans from 0% (Claude Opus 4.1 on AA-
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
Findings
8 High3 Medium6 Low
HighChild Processdist/chunk-DDEMQWGT.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-FYL32M22.js
HighCredential Redirect Persistencedist/server-FYL32M22.js
HighCommand Output Exfiltrationdist/server-FYL32M22.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-F6MUGMRN.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/server-FYL32M22.js
Affected versions and remediation
This report applies to mcp-scraper@0.73.8.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.73.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.