registry / ocular-audio-mcp / 1.0.1

ocular-audio-mcp@1.0.1

OcularAudio MCP: Advanced Async Multi-Platform Video Transcript & Screen Vision Server

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 13.3 KB of source, external domains: python.org, www.youtube.com

Source & flagged code

2 flagged

bin/cli.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

3const path = require('path');

4const fs = require('fs');

5const os = require('os');

7const CACHE_DIR = path.join(os.homedir(), '.cache', 'ocular_audio_mcp');

8const VERSION = require('../package.json').version;

10// ── Clipboard helper ────────────────────────────────────────────────────────

11async function getClipboardy() {

12 try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.jsView on unpkg · L6

13 const clipboardy = await import('clipboardy');

14 return clipboardy.default;

15 } catch {

16 return null;

17 }

18}

20// ── Cache helpers ───────────────────────────────────────────────────────────

21function ensureCacheDir() {

22 if (!fs.existsSync(CACHE_DIR)) {

23 fs.mkdirSync(CACHE_DIR, { recursive: true });

24 }

25}

ocular_audio_mcp.pyView file

•path = ocular_audio_mcp.py kind = build_helper sizeBytes = 44103 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

ocular_audio_mcp.pyView on unpkg

Source & flagged code

2 flagged · loading source

bin/cli.jsView file

6L7: const CACHE_DIR = path.join(os.homedir(), '.cache', 'ocular_audio_mcp'); L8: const VERSION = require('../package.json').version; L9: L10: // ── Clipboard helper ──────────────────────────────────────────────────────── L11: async function getClipboardy() { L12: try { ... L40: try { L41: const data = JSON.parse(fs.readFileSync(filePath, 'utf-8')); L42: videos.push({ ... L92: Output Control: L93: --stdout Print transcript to stdout only (no clipboard, no file)

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.jsView on unpkg · L6

ocular_audio_mcp.pyView file

•path = ocular_audio_mcp.py kind = build_helper sizeBytes = 44103 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

ocular_audio_mcp.pyView on unpkg

Findings

1 High2 Medium3 Low

HighSandbox Evasion Gated Capabilitybin/cli.js

MediumShips Build Helperocular_audio_mcp.py

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

bin/cli.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

3const path = require('path');

4const fs = require('fs');

5const os = require('os');

7const CACHE_DIR = path.join(os.homedir(), '.cache', 'ocular_audio_mcp');

8const VERSION = require('../package.json').version;

10// ── Clipboard helper ────────────────────────────────────────────────────────

11async function getClipboardy() {

12 try {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/cli.jsView on unpkg · L6

13 const clipboardy = await import('clipboardy');

14 return clipboardy.default;

15 } catch {

16 return null;

17 }

18}

21function ensureCacheDir() {

22 if (!fs.existsSync(CACHE_DIR)) {

23 fs.mkdirSync(CACHE_DIR, { recursive: true });

24 }

25}

ocular_audio_mcp.pyView file

•path = ocular_audio_mcp.py kind = build_helper sizeBytes = 44103 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

ocular_audio_mcp.pyView on unpkg