registry / pincushion-mcp / 1.7.0
pincushion-mcp@1.7.0
Visual feedback as agent work packets. Stakeholders drop pins on your live app; your AI coding agent reads each pin (selector, screenshot, DOM, thread, acceptance criteria) via MCP and ships the fix.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection shows risky primitives are tied to the advertised MCP feedback product and explicit user commands, with no lifecycle execution, hidden payload, credential harvesting, or unconsented AI-agent config mutation. Mark clean despite scanner hints because the source facts align with documented functionality.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User starts MCP server or explicitly invokes login/setup/claim/mobile-wall subcommands.
Impact
Writes feedback/project metadata locally and syncs with Pincushion services when configured; no unconsented exfiltration or persistence confirmed.
Mechanism
MCP feedback sync, local bridge, and user-invoked setup/capture helpers
AI rationale
Static inspection shows risky primitives are tied to the advertised MCP feedback product and explicit user commands, with no lifecycle execution, hidden payload, credential harvesting, or unconsented AI-agent config mutation. Mark clean despite scanner hints because the source facts align with documented functionality.
Evidence
package.jsonserver.jslogin.mjsmobile-wall.mjslib/setup-core.jssetup.mjsclaim.mjslib/ownership.mjslib/core.jslib/posthog.js.feedback/annotations/*.json.feedback/projects.json.feedback/pending-approvals.json.feedback/PINS.md.feedback/dashboard.html.feedback/selections.json.feedback/.quickstart/landing.html.cursor/mcp.json.vscode/mcp.json.mcp.json~/.pincushion/license-keycrit-wall/**
Network endpoints8
/functions/v1/sync-annotations
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with high false-positive risk.
Evidence for AI clean decision
- server.js starts runtime cloud sync and a 127.0.0.1 bridge that can write .feedback annotation files.
- login.mjs opens a browser and writes ~/.pincushion/license-key only when user runs login/setup.
- mobile-wall.mjs uses execFileSync for xcrun/maestro/idb only under the explicit mobile-wall subcommand.
- lib/setup-core.js can write project-local MCP config under setup, but no lifecycle hook triggers it automatically.
Evidence against
- package.json has no install/preinstall/postinstall lifecycle scripts.
- server.js main behavior is an MCP server for feedback pins; network calls are to Pincushion/Supabase/Sentry/PostHog product endpoints.
- No credential harvesting found beyond reading explicit Pincushion license key sources and Vercel token for user-invoked claim validation.
- No obfuscated payloads, eval/Function execution, native binary loading, or dependency-confusion pattern found.
- AI/editor config writes are user-invoked setup actions and project-local, not unconsented install-time control-surface mutation.
- Scanner-highlighted mobile-wall.mjs is a documented iOS simulator capture tool, not a staged payload.
Source & flagged code
3 flaggedlogin.mjsView file
28import http from 'http';
L29: import { spawn } from 'child_process';
L30: import { writeFileSync, mkdirSync, chmodSync } from 'fs';
High
27L28: import http from 'http';
L29: import { spawn } from 'child_process';
L30: import { writeFileSync, mkdirSync, chmodSync } from 'fs';
...
L42: function keyFilePath() {
L43: return process.env.PINCUSHION_LICENSE_FILE || join(homedir(), '.pincushion', 'license-key');
L44: }
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
login.mjsView on unpkg · L27mobile-wall.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = pincushion-mcp@1.6.0
matchedIdentity = npm:cGluY3VzaGlvbi1tY3A:1.6.0
similarity = 0.944
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical3 High2 Medium5 Low
CriticalPrevious Version Dangerous Deltamobile-wall.mjs
HighChild Processlogin.mjs
HighShell
HighSame File Env Network Executionlogin.mjs
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to pincushion-mcp@1.7.0.
See all versions of pincushion-mcp for other recorded verdicts.
- Review the evidence and your use of pincushion-mcp@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.