registry / openhammer / 1.1.0

openhammer@1.1.0

Standalone MCP server (no LLM) exposing shell + filesystem tools to a remote agent over Streamable HTTP. Run it on a laptop or deploy it on a server to give any authenticated MCP client controlled computer access.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

The explicitly launched MCP server gives authenticated remote clients shell execution and unrestricted filesystem writes. Optional tunnels can expose that server publicly.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the openhammer CLI/server and supplies its token to an MCP client; a channel/tunnel must be configured or requested for public exposure.

Impact

An authorized token holder can execute arbitrary commands and read or alter files accessible to the running user.

Mechanism

Authenticated remote shell and filesystem-control MCP service

Rationale

This is a deliberately remote-control package with concrete authenticated RCE capability, so it warrants a warning as dangerous dual-use software. Source inspection found no malicious installation behavior or covert data theft.

Evidence

package.jsondist/main.jsdist/mcp/http-transport.jsdist/auth/middleware.jsdist/tools/bash.jsdist/tools/write.jsdist/tunnel/cloudflare.js

Network endpoints1

*.trycloudflare.com

Decision evidence

public snapshot

openhammer@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code