mcp-scraper@0.78.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious install-time or covert exfiltration behavior was found. The explicit user-scope agent registration and optional persisted browser state warrant a warning as an AI-agent capability risk.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs mcp-scraper-cli agent install claude --apply or enables browser profile change saving.
Impact
A user-approved MCP registration can cause later agent sessions to run this package; persisted browser state increases the sensitivity of the enabled browser feature.
Mechanism
Explicit agent configuration and optional browser-profile persistence.
AI rationale
No concrete malicious install-time or covert exfiltration behavior was found. The explicit user-scope agent registration and optional persisted browser state warrant a warning as an AI-agent capability risk.
Evidence
package.jsondist/bin/mcp-scraper-cli.jsdist/chunk-OM7HVEJ3.jsdist/chunk-UFJJGXVO.jsClaude Code user-scope MCP configurationhosted browser profile state
Network endpoints1
mcpscraper.dev
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI can alter a user's Claude Code MCP registration when explicitly run with --apply.
- The apply path reads, removes, and re-adds the package's user-scope MCP entry.
- The package supports browser profiles whose cookies and storage may be persisted when the user requests that option.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare lifecycle hook.
- Agent configuration is an explicit CLI action; Codex and Claude Desktop modes only print configuration.
- The hosted API key is supplied by the user and sent to the configured API URL; no fixed unrelated gateway was found.
- No self-dependency, obfuscated loader, silent credential harvesting, or automatic foreign control-surface mutation was found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/bin/mcp-scraper-cli.jsView file
19import { Command } from "commander";
L20: import { spawn } from "child_process";
L21: import { mkdir as mkdir2, writeFile } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L19461function apiOptions(opts) {
L462: const apiKey = String(opts.apiKey ?? process.env.MCP_SCRAPER_API_KEY ?? "").trim();
L463: if (!apiKey) throw new Error("MCP_SCRAPER_API_KEY is required. Pass --api-key or set the environment variable.");
L464: return {
L465: apiUrl: String(opts.apiUrl ?? process.env.MCP_SCRAPER_API_URL ?? "https://mcpscraper.dev").replace(/\/$/, ""),
L466: apiKey
...
L472: try {
L473: const child = spawn(command, args, { detached: true, stdio: "ignore" });
L474: child.unref();
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L46119import { Command } from "commander";
L20: import { spawn } from "child_process";
L21: import { mkdir as mkdir2, writeFile } from "fs/promises";
...
L66: }
L67: function parseClaudeMcpGet(stdout) {
L68: const command = stdout.match(/^\s*Command:\s*(.+?)\s*$/m)?.[1];
...
L144: "",
L145: "Desktop Extension: https://mcpscraper.dev/downloads/mcp-scraper.mcpb",
L146: restart
...
L161: async function readKeyFile() {
L162: const path = process.env.MCP_SCRAPER_KEY_PATH?.trim() || join(homedir(), ".mcp-scraper-key");
L163: try {
Findings
8 High3 Medium6 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-6B2OG3NN.js
HighCredential Redirect Persistencedist/server-6B2OG3NN.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-UFJJGXVO.js
HighPrevious Version Dangerous Deltadist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/server-6B2OG3NN.js
Affected versions and remediation
This report applies to mcp-scraper@0.78.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.78.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.