registry / mcp-scraper / 0.96.3
mcp-scraper@0.96.3
Upgrade to mcp-scraper 0.98.0 or newer. Older releases include obsolete local execution code; see the packaged README for hosted-client migration.
MCP server for MCP Scraper web intelligence tools
AI Security Review
scanned 22d ago · by lpm-firewall-aiSource inspection found no lifecycle hook or verified malicious behavior behind the flagged patterns. The dynamic evaluation and credential API references are consistent with the package’s scraping and service-client functions.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was identified; configuration changes require an explicit CLI option, and browser onboarding uses a request-supplied profile and domain.
Impact
No unauthorized credential disclosure, account mutation, or install-time action was established.
Mechanism
The flagged code corresponds to credential API client methods, bounded browser-page evaluation, output schema configuration, and test-gated package telemetry.
AI rationale
Source inspection found no lifecycle hook or verified malicious behavior behind the flagged patterns. The dynamic evaluation and credential API references are consistent with the package’s scraping and service-client functions.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest lists package entrypoints and command binaries, with no install lifecycle hook shown.
- The credential-related excerpt defines an API client method for posting to a credentials endpoint; it does not show credential harvesting or an unrelated recipient.
- The dynamic function is passed to a browser page evaluation with selectors and abort checks, consistent with scraping.
- The environment setting in the server bundle controls output schema mode.
- The memory upload path is gated by a test-only setting and uses the package service base URL.
- The CLI gates Claude Code configuration changes on the explicit --apply option; the server onboarding route consumes request-supplied profile and domain values. The X-Ray helper is framed around an explicit setup request.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
14 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{k as N,l as j,m as L,n as T,r as U}from"../chunk-4HZXATHB.js";import"../chunk-KJQXUZ4Y.js";import"../chunk-6N5EC7ZO.js";import{g as v,j as b,k as D,l as K,m as H}from"../chu...
L3: `)){let l=a.match(/^\s{2,}([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);if(!l){if(a.trim().length&&!/^\s{2,}/.test(a))break;continue}p[l[1]]=l[2]}return{command:n,args:i,env:p}}function O(e){le...
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{k as N,l as j,m as L,n as T,r as U}from"../chunk-4HZXATHB.js";import"../chunk-KJQXUZ4Y.js";import"../chunk-6N5EC7ZO.js";import{g as v,j as b,k as D,l as K,m as H}from"../chu...
L3: `)){let l=a.match(/^\s{2,}([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);if(!l){if(a.trim().length&&!/^\s{2,}/.test(a))break;continue}p[l[1]]=l[2]}return{command:n,args:i,env:p}}function O(e){le...
L4: `):c==="claude"?["# Claude Code command",a,i.exactConfig,"","# One-command Claude Code setup",u,"",`Continuation: ${i.continuation}`,`Rollback: ${i.rollback}`,"",p].join(`
L5: `):c==="claude-desktop"?["# Claude Desktop config",a,i.exactConfig,"","Desktop Extension: https://mcpscraper.dev/downloads/mcp-scraper.mcpb",`Continuation: ${i.continuation}`,`Roll...
L6: `):[`# ${i.label} MCP config`,a,
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/bin/mcp-scraper-cli.jsFindings
4 Critical10 High3 Medium5 Low
CriticalSame File Env Network Executiondist/index.cjs
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
CriticalPrevious Version Dangerous Deltadist/index.cjs
HighChild Processdist/bin/mcp-scraper-cli.js
HighShell
HighEvaldist/chunk-GLCR4KJI.js
HighBrowser Session Account Hijackdist/server-74VGVXA4.js
HighCredential Redirect Persistencedist/server-74VGVXA4.js
HighCommand Output Exfiltrationdist/chunk-QYPSFZK3.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
High
Affected versions and remediation
This report applies to mcp-scraper@0.96.3.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.96.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.