mcp-scraper@0.88.2
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo automatic install-time behavior or unrelated credential theft was found. The package nevertheless exposes high-impact hosted login persistence and explicit AI-agent configuration mutation, so it warrants a warning as a dangerous capability.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the MCP server or explicitly invokes mcp-scraper-cli agent install claude --apply.
Impact
A user who elects to use these features entrusts login-session state and an API key to the hosted service; the CLI can replace its named user-scope MCP entry.
Mechanism
Hosted browser-session persistence and API-key-authenticated service calls.
AI rationale
No automatic install-time behavior or unrelated credential theft was found. The package nevertheless exposes high-impact hosted login persistence and explicit AI-agent configuration mutation, so it warrants a warning as a dangerous capability.
Evidence
dist/chunk-PKZS6SHW.jsdist/chunk-GXBZXWXB.jsdist/bin/mcp-scraper-cli.js~/.mcp-scraper-keyClaude user-scope MCP configuration
Network endpoints1
mcpscraper.dev/memory/mcp-call
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The MCP tool exposes persistence of browser cookies and storage for named profiles.
- The runtime sends its configured MCP API key to the hosted service.
- An explicit CLI option can replace a user-scope Claude MCP entry.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The hosted endpoint defaults to the package's own mcpscraper.dev service.
- Agent configuration mutation requires the user to invoke --apply and provide an API key.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggeddist/bin/mcp-scraper-cli.jsView file
25import { Command } from "commander";
L26: import { spawn } from "child_process";
L27: import { mkdir as mkdir2, writeFile } from "fs/promises";
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L25464function apiOptions(opts) {
L465: const apiKey = String(opts.apiKey ?? process.env.MCP_SCRAPER_API_KEY ?? "").trim();
L466: if (!apiKey) throw new Error("MCP_SCRAPER_API_KEY is required. Pass --api-key or set the environment variable.");
L467: return {
L468: apiUrl: String(opts.apiUrl ?? process.env.MCP_SCRAPER_API_URL ?? "https://mcpscraper.dev").replace(/\/$/, ""),
L469: apiKey
...
L475: try {
L476: const child = spawn(command, args, { detached: true, stdio: "ignore" });
L477: child.unref();
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L46425import { Command } from "commander";
L26: import { spawn } from "child_process";
L27: import { mkdir as mkdir2, writeFile } from "fs/promises";
...
L52: }
L53: function parseClaudeMcpGet(stdout) {
L54: const command = stdout.match(/^\s*Command:\s*(.+?)\s*$/m)?.[1];
...
L134: "",
L135: "Desktop Extension: https://mcpscraper.dev/downloads/mcp-scraper.mcpb",
L136: `Continuation: ${recipe.continuation}`,
...
L163: async function readKeyFile() {
L164: const path = process.env.MCP_SCRAPER_KEY_PATH?.trim() || join(homedir(), ".mcp-scraper-key");
L165: try {
Findings
10 High4 Medium5 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighShell
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighBrowser Session Account Hijackdist/server-SQZ3A7SY.js
HighCredential Exfiltrationdist/chunk-GXBZXWXB.js
HighCredential Redirect Persistencedist/server-SQZ3A7SY.js
HighCommand Output Exfiltrationdist/server-SQZ3A7SY.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
HighSemantic Analysis Limiteddist/chunk-S24LFPL7.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to mcp-scraper@0.88.2.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.88.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.