md-redline@0.8.3
Inline review comments for markdown specs. Built-in MCP server hands feedback directly to your AI agent.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious behavior was found by source inspection. The explicit agent-configuration setup is a guarded capability that warrants a warning under the stated policy.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
User runs `mdr mcp install`.
Impact
Adds a local MCP command to the selected Claude client configuration.
Mechanism
Explicit registration of the package's MCP server.
AI rationale
No concrete malicious behavior was found by source inspection. The explicit agent-configuration setup is a guarded capability that warrants a warning under the stated policy.
Evidence
package.jsonbin/cli.jsdist/server.jsdist/assets/chunk-K5T4RW27-iKKh87td.js
Network endpoints1
registry.npmjs.org/-/package/md-redline/dist-tags
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit `mdr mcp install` command registers an MCP server with Claude Code and Claude Desktop.
- Claude Desktop installation writes a `md-redline` entry into that client's config.
- The only lifecycle hook is `prepublishOnly`, so consumers receive no install-time execution.
Evidence against
- No preinstall, install, or postinstall hook is present.
- Server binds to loopback; observed network use is an npm-registry update check.
- The flagged bundled asset contains a zero-width character in third-party Mermaid parser content, not an execution chain.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = md-redline@0.7.1
matchedIdentity = npm:bWQtcmVkbGluZQ:0.7.1
similarity = 0.942
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg36const APP_DIR = resolve(__dirname, '..');
L37: const require = createRequire(import.meta.url);
L38: const { version: CLI_VERSION } = require(join(APP_DIR, 'package.json'));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/cli.jsView on unpkg · L36dist/assets/chunk-K5T4RW27-iKKh87td.jsView file
76contains invisible/control Unicode U+200B (zero width space)
`&&r++}n&&t.length>0&&e.push(t.length),this._lineOffsets=e}return this._lineOffsets}positionAt(e){e=Math.max(Math.min(e,this._content.length),0);let t=this.getLineOffsets(),n=0,r=t.length;if(r===0)return q.create(0,e);for(;n<r;){let i=Math.
Critical
Trojan Source Unicode
Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/assets/chunk-K5T4RW27-iKKh87td.jsView on unpkg · L76bin/test-windows.ps1View file
•path = bin/test-windows.ps1
kind = build_helper
sizeBytes = 1902
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
bin/test-windows.ps1View on unpkgdist/assets/chunk-OYMX7WX6-BSyNxcvh.jsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/chunk-OYMX7WX6-CQi5rS4T.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/chunk-OYMX7WX6-BSyNxcvh.jsView on unpkgdist/assets/diagram-G4DWMVQ6-BjoS4WaE.jsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/diagram-G4DWMVQ6-BBJ-sDt9.mjs
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/diagram-G4DWMVQ6-BjoS4WaE.jsView on unpkgdist/assets/flowDiagram-DWJPFMVM-CD2x_71_.jsView file
•matchType = token_shingles
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = dist/public/assets/flowDiagram-DWJPFMVM-1K1AtH2O.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
shingleOverlap = 48
summary = source token shingles overlapped finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/flowDiagram-DWJPFMVM-CD2x_71_.jsView on unpkgdist/assets/wardleyDiagram-NUSXRM2D-Debgku0g.jsView file
•matchType = normalized_sha256
matchedPackage = @inkeep/open-knowledge@0.31.0
matchedPath = [redacted]-NUSXRM2D-CynkQzsD.js
matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
dist/assets/wardleyDiagram-NUSXRM2D-Debgku0g.jsView on unpkgFindings
1 Critical5 High5 Medium5 Low
CriticalTrojan Source Unicodedist/assets/chunk-K5T4RW27-iKKh87td.js
HighKnown Malware Source Similaritydist/assets/chunk-OYMX7WX6-BSyNxcvh.js
HighKnown Malware Source Similaritydist/assets/diagram-G4DWMVQ6-BjoS4WaE.js
HighKnown Malware Source Similaritydist/assets/flowDiagram-DWJPFMVM-CD2x_71_.js
HighKnown Malware Source Similaritydist/assets/wardleyDiagram-NUSXRM2D-Debgku0g.js
HighPrevious Version Dangerous Deltabin/cli.js
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/test-windows.ps1
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to md-redline@0.8.3.
See all versions of md-redline for other recorded verdicts.
- Review the evidence and your use of md-redline@0.8.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.