registry / mcp-scraper / 0.80.0
mcp-scraper@0.80.0
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiHigh scanner labels are noisy matches against a real MCP scraper: opt-in Claude config, hosted ChatGPT fan-out capture, and vendor LLM or harvest APIs. Source shows no install hook, no secret theft, and no unconsented foreign agent-control write.
Static reason
One or more suspicious static signals were detected.
Trigger
No automatic install or import trigger. Code runs only when a user starts the MCP stdio server, a CLI command, or the hosted API.
Impact
No confirmed malicious impact. Dual-use browser and process helpers stay inside this package's own product workflows.
Mechanism
User-invoked MCP tools and CLI helpers for scraping and setup
AI rationale
High scanner labels are noisy matches against a real MCP scraper: opt-in Claude config, hosted ChatGPT fan-out capture, and vendor LLM or harvest APIs. Source shows no install hook, no secret theft, and no unconsented foreign agent-control write.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- A user-run CLI can spawn the Claude command and upsert a user-scope MCP server entry when --apply is passed.
- Hosted browser capture reuses a logged-in ChatGPT or Claude page, can type a prompt, and intercepts streamed answers.
- Harvest and video helpers call third-party browser, LLM, and IP-lookup APIs.
Evidence against
- package.json has no preinstall, install, or postinstall hooks; prepack is publisher verification only.
- mcp-scraper-install only prints a terminal install card and does not write agent config.
- Claude MCP registration is opt-in, limited to this package, and rolls back on failure.
- Stdio and CLI send the product API key to mcpscraper.dev, not a hidden credential drain.
- ChatGPT/Claude session reuse is the documented AEO fan-out tool, not account-settings hijack.
- The library entry exports harvest and video helpers and does not run work on import.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
9 flaggeddist/bin/mcp-scraper-cli.jsView file
19import { Command } from "commander";
L20: import { spawn } from "child_process";
L21: import { mkdir as mkdir2, writeFile } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L19461function apiOptions(opts) {
L462: const apiKey = String(opts.apiKey ?? process.env.MCP_SCRAPER_API_KEY ?? "").trim();
L463: if (!apiKey) throw new Error("MCP_SCRAPER_API_KEY is required. Pass --api-key or set the environment variable.");
L464: return {
L465: apiUrl: String(opts.apiUrl ?? process.env.MCP_SCRAPER_API_URL ?? "https://mcpscraper.dev").replace(/\/$/, ""),
L466: apiKey
...
L472: try {
L473: const child = spawn(command, args, { detached: true, stdio: "ignore" });
L474: child.unref();
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L46119import { Command } from "commander";
L20: import { spawn } from "child_process";
L21: import { mkdir as mkdir2, writeFile } from "fs/promises";
...
L66: }
L67: function parseClaudeMcpGet(stdout) {
L68: const command = stdout.match(/^\s*Command:\s*(.+?)\s*$/m)?.[1];
...
L144: "",
L145: "Desktop Extension: https://mcpscraper.dev/downloads/mcp-scraper.mcpb",
L146: restart
...
L161: async function readKeyFile() {
L162: const path = process.env.MCP_SCRAPER_KEY_PATH?.trim() || join(homedir(), ".mcp-scraper-key");
L163: try {
Findings
8 High4 Medium6 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-XBRLYGTR.js
HighCredential Redirect Persistencedist/server-XBRLYGTR.js
HighCommand Output Exfiltrationdist/server-XBRLYGTR.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighSemantic Analysis Limiteddist/chunk-KNGTQD6U.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/server-XBRLYGTR.js
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to mcp-scraper@0.80.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.80.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.