registry / mcp-scraper / 0.99.1
mcp-scraper@0.99.1
Authenticated public client for hosted MCP Scraper tools and REST APIs
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe inspected source supports ordinary hosted API client behavior and user-invoked Claude Code setup. The scanner’s credential and command-output signals do not establish an unrelated recipient or an unconsented attack, so the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI command; Claude Code configuration changes additionally require `--apply`.
Impact
No confirmed attack impact was established from the inspected source.
Mechanism
The CLI sends API requests to the configured API URL and uses child processes for the explicit Claude Code setup flow. The inspected code does not establish unrelated credential or command-output exfiltration.
AI rationale
The inspected source supports ordinary hosted API client behavior and user-invoked Claude Code setup. The scanner’s credential and command-output signals do not establish an unrelated recipient or an unconsented attack, so the package is clean.
Network endpoints1
mcpscraper.dev
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies the package as a hosted MCP and REST API client and points to its runtime entrypoints.
- The CLI requires a supplied or configured API key and uses it with the configured API URL for API requests.
- The CLI’s Claude configuration changes run only when the user invokes the command with `--apply`; the code limits application to Claude Code.
Evidence against
- The scanner’s command-output exfiltration hint is not established by the inspected CLI flow: the observed child-process calls read Claude configuration and list output for the explicit setup action.
- The manifest declares no lifecycle hook, and the inspected credential sends are client API requests rather than transfers to an unrelated fixed recipient.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/bin/mcp-scraper-cli.jsView file
1#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
High
Child Process
Package source references child process execution.
dist/bin/mcp-scraper-cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import{Command as Fe}from"commander";import{spawn as ye}from"node:child_process";import{mkdir as ze,writeFile as Ze}from"node:fs/promises";import{basename as Qe,join as ge}from"nod...
L3: command = "npx"
...
L10: `):[`# ${n.label} MCP config`,l,n.exactConfig,"",`Continuation: ${n.continuation}`,`Rollback: ${n.rollback}`,...n.restartRequired?["",a]:[]].join(`
L11: `)}import{homedir as $e}from"node:os";import{join as Ee}from"node:path";function k(e){return e?.trim()||process.env.MCP_SCRAPER_OUTPUT_DIR?.trim()||Ee($e(),"Downloads","mcp-scraper...
L12: Fix: ${n.fix}`:"";return`[${r[n.status]}] ${n.label}: ${n.detail}${a}`}),"",`Recommended MCP command: npx ${e.recommendedConfig.args.join(" ")}`].join(`
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/bin/mcp-scraper-cli.jsView on unpkg · L1Findings
7 High3 Medium2 Low
HighChild Processdist/bin/mcp-scraper-cli.js
HighSame File Env Network Executiondist/bin/mcp-scraper-cli.js
HighCredential Exfiltrationdist/bin/mcp-scraper-cli.js
HighCommand Output Exfiltrationdist/bin/mcp-scraper-cli.js
HighSandbox Evasion Gated Capabilitydist/bin/mcp-scraper-cli.js
HighTrigger Reachable Credential Exfiltrationdist/bin/mcp-scraper-cli.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/mcp-scraper-cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to mcp-scraper@0.99.1.
See all versions of mcp-scraper for other recorded verdicts.
- Review the evidence and your use of mcp-scraper@0.99.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.