registry / mcp-scraper / 0.96.2
mcp-scraper@0.96.2
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe manifest and runtime excerpts show application entrypoints and user-invoked browser and setup operations. The flagged credential location is a generic client API method, and the inspected source does not establish an unauthorized transfer or automatic mutation.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A consumer imports the package or explicitly invokes a CLI or MCP operation.
Impact
No confirmed attack impact was found.
Mechanism
The reviewed onboarding route uses the user's profile and domain inputs to start a browser session; no unauthorized credential transfer or automatic account change was established.
AI rationale
The manifest and runtime excerpts show application entrypoints and user-invoked browser and setup operations. The flagged credential location is a generic client API method, and the inspected source does not establish an unauthorized transfer or automatic mutation.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to compiled runtime entrypoints and declares CLI commands.
- The flagged credential location exposes credential-object CRUD through a client transport; it does not show an unrelated recipient.
- The H6 bundle queues and deduplicates Stripe events; the HVQ and KU excerpts show local application-module imports.
- The CommonJS entrypoint exports video generation, prompt building, and harvesting APIs.
- Browser onboarding uses the authenticated user's profile and domain inputs to start a browser session; the CLI presents agent setup as an explicit command.
- The setup protocol asks an agent to call an installation tool with a site URL and goal.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
13 flaggeddist/server-AEEE7E3C.jsView file
191WHERE id = ?`,args:[r,t]})}async logSiteAuditPhaseComplete(t,r,n){await this.db.execute({sql:`INSERT OR IGNORE INTO site_audit_phase_log (job_id, phase, output_summary, completed_a...
L192: VALUES (?, ?, ?, datetime('now'))`,args:[t,r,JSON.stringify(n)]}).catch(i=>{console.warn("[site-audit-repository] logSiteAuditPhaseComplete failed:",i instanceof Error?i.message:St...
L193: ${cM(t)}`;for(let i of CV)if(i.pattern.test(n))return{detected:!0,reason:i.reason};return{detected:!1,reason:null}}function dM(e){let t=e.status??null;if(t==null||t<200||t>=300)ret...
High
Child Process
Package source references child process execution.
dist/server-AEEE7E3C.jsView on unpkg · L1911import{a as RR,b as Xg,c as CR,d as Zg,e as Cl,f as Tl,g as Wi,h as Vr,j as SL}from"./chunk-RYX4FJVH.js";import{A as fL,B as hL,C as yL,D as fv,E as Hf,F as hv,G as _L,H as wL,I as...
L2:
...
L175: [...truncated...]`:s,r=t(JSON.stringify(e.preComputedArchitectureScore,null,2),3e3),n=t(JSON.stringify(e.preComputedIlesScore,null,2),3e3),i=t(JSON.stringify(e.rankedBacklog),5e3);...
L176: `)}var _V=Ze.object({site_id:Ze.string(),domain:Ze.string(),confirmed_orphans:Ze.array(Ze.object({url:Ze.string(),reason:Ze.string()})),rejected_candidates:Ze.array(Ze.object({url:...
L177: `).map(o=>o.trim()).filter(o=>o.length>0&&!o.startsWith("#")),i=[];for(let o of n)o.includes(",")?i.push(...o.split(",").map(s=>s.trim()).filter(s=>s.length>0)):i.push(o);return i....
...
L191: WHERE id = ?`,args:[r,t
High
Browser Session Account Hijack
Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.
Findings
3 Critical10 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighChild Processdist/server-AEEE7E3C.js
HighShell
HighEvaldist/chunk-HVQZRQRJ.js
HighBrowser Session Account Hijackdist/server-AEEE7E3C.js
HighCredential Redirect Persistencedist/server-AEEE7E3C.js
HighCommand Output Exfiltrationdist/server-AEEE7E3C.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
High
Affected versions and remediation
This report applies to mcp-scraper@0.96.2.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.96.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.