registry / mcp-scraper / 0.99.0
mcp-scraper@0.99.0
Authenticated public client for hosted MCP Scraper tools and REST APIs
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe inspected source ties authenticated requests to a configurable API client and limits configuration changes to an explicit Claude Code apply command. Scanner signals do not establish automatic credential or command-output exfiltration, and the manifest has no lifecycle hooks.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a CLI command; configuration changes require the user to supply --apply.
Impact
No confirmed unintended credential disclosure, command-output exfiltration, or unconsented broad agent configuration change was established.
Mechanism
The CLI sends its supplied API key to the configured API URL. Its configuration apply path is limited to Claude Code and requires --apply.
AI rationale
The inspected source ties authenticated requests to a configurable API client and limits configuration changes to an explicit Claude Code apply command. Scanner signals do not establish automatic credential or command-output exfiltration, and the manifest has no lifecycle hooks.
Evidence
package.jsondist/bin/mcp-scraper-cli.js
Network endpoints1
mcpscraper.dev
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists commander as the sole runtime dependency and declares no lifecycle hook.
- The CLI takes an API key from an explicit option or environment variable and allows an API URL override, defaulting to mcpscraper.dev.
- The CLI sends that key to the selected API URL for the requested API call.
- Applying agent configuration requires the explicit --apply option, is limited to Claude Code, and checks for an API key.
- The CLI parses command-line input to run its commands; the inspected source does not establish an automatic credential export or command-output upload.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
...
L10: `):[`# ${n.label} MCP config`,l,n.exactConfig,"",`Continuation: ${n.continuation}`,`Rollback: ${n.rollback}`,...n.restartRequired?["",a]:[]].join(`
L11: `)}import{homedir as $e}from"node:os";import{join as Ee}from"node:path";function k(e){return e?.trim()||process.env.MCP_SCRAPER_OUTPUT_DIR?.trim()||Ee($e(),"Downloads","mcp-scraper...
L12: Fix: ${n.fix}`:"";return`[${r[n.status]}] ${n.label}: ${n.detail}${a}`}),"",`Recommended MCP command: npx ${e.recommendedConfig.args.join(" ")}`].join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L1Findings
7 High3 Medium2 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighCredential Exfiltrationdist/bin/mcp-scraper-cli.js
HighCommand Output Exfiltrationdist/bin/mcp-scraper-cli.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/bin/mcp-scraper-cli.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/mcp-scraper-cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to mcp-scraper@0.99.0.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.99.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.