registry / openrp-toolkit / 1.0.1

openrp-toolkit@1.0.1

Model Context Protocol (MCP) Server and AI Agent Skill Suite for OpenRP.ai

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 87.2 KB of source, external domains: github.com, openrp.ai, uixnaquqjhzcctyfoapf.supabase.co

Source & flagged code

2 flagged

bin/cli.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

3/**

4 * OpenRP Toolkit CLI

5 * Model Context Protocol (MCP) Server & AI Agent Skill Installer

6 * Pure Node.js Edition - Zero External Dependencies

7 *

8 * Maintainer: Kaa (OpenRP Community Creator)

9 * Platform: https://openrp.ai

10 */

12const fs = require('fs');

13const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L11

14const os = require('os');

15const { execSync } = require('child_process');

16const readline = require('readline');

17const https = require('https');

19const PACKAGE_ROOT = path.resolve(__dirname, '..');

20const MCP_SERVER_SCRIPT = path.join(PACKAGE_ROOT, 'mcp', 'server.js');

21const SKILLS_DIR = path.join(PACKAGE_ROOT, 'skills', 'openrp');

22const AUTH_FILE = path.join(os.homedir(), '.openrp_mcp_auth.json');

24const args = process.argv.slice(2);

25const command = args[0] || 'serve';

27function printBanner() {

28 console.log('┌ OpenRP Toolkit & MCP Suite (v1.0.0)');

29 console.log('│ Maintainer: Kaa (https://github.com/kaaelix)');

30 console.log('│ Platform: https://openrp.ai');

31 console.log('└───────────────────────────────────────────────────────────────\n');

examples/debug_behavior_execution.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = openrp-toolkit@1.0.0 matchedIdentity = npm:b3BlbnJwLXRvb2xraXQ:1.0.0 similarity = 1.000 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

examples/debug_behavior_execution.jsView on unpkg

Source & flagged code

2 flagged · loading source

bin/cli.jsView file

openrp-toolkit@1.0.1

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code