registry / punchlist-mcp / 0.3.0

punchlist-mcp@0.3.0

MCP companion server for Punchlist — discover a Punchlist iOS device on your LAN and pull voice-narrated screen sessions (screenshots + synchronized transcripts) straight into Claude or any MCP client.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 455 KB of source, external domains: github.com, icloud.developer.apple.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

4 flagged

dist/punchlist-mcp.cjsView file

Lines 1-61javascript

1#!/usr/bin/env node

2var Mw=Object.create;var dc=Object.defineProperty;var Uw=Object.getOwnPropertyDescriptor;var qw=Object.getOwnPropertyNames;var Fw=Object.getPrototypeOf,Bw=Object.prototype.hasOwnProperty;var $=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),pc=(t,e)=>{for(var r in e)dc(t,r,{get:e[r],enumerable:!0})},Vw=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of qw(e))!Bw.call(t,o)&&o!==r&&dc(t,o,{get:()=>e[o],enumerable:!(n=Uw(e,o))||n.enumerable});return t};var at=(t,e,r)=>(r=t!=null?Mw(Fw(t)):{},Vw(e||!t||!t.__esModule?dc(r,"default",{value:t,enumerable:!0}):r,t));var ms= ...

3`:""},this._extScope=e,this._scope=new Lt.Scope({parent:e}),this._nodes=[new od]}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){return this._extScope.name(e)}scopeValue(e,r){let n=this._extScope.value(e,r);return(this._values[n.prefix]||(this._values[n.prefix]=new Set)).add(n),n}getScopeValue(e,r){return this._extScope.getValue(e,r)}scopeRefs(e){return this._extScope.scopeRefs(e,this._values)}scopeCode(){return this._extScope.scopeCode(this._values)}_def(e,r,n,o){let s=this._scope.toName(r);return n!==void 0&&o&&(this._constants[s.str]=n),this._l ...

4 || (${i} == "string" && ${o} && ${o} == +${o})`).assign(a,(0,K._)`+${o}`);return;case"integer":n.elseIf((0,K._)`${i} === "boolean" || ${o} === null

6 || ${i} === "boolean" || ${o} === null`).assign(a,(0,K._)`[${o}]`)}}}function qk({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,K._)`${e} !== undefined`,()=>t.assign((0,K

7 missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

8 depsCount: ${e},

9 deps: ${r}}`};var xP={keyword:"dependencies",type:"object",schemaType:"object",error:Xt.error,code(t){let[e,r]=bP(t);D_(t,e),L_(t,r)}};function bP({schema:t}){let e={},r={};for(let n in

10`).filter(i=>i),o=Math.min(...n.map(i=>i.length-i.trimStart().length)),s=n.map(i=>i.slice(o)).map(i=>" ".repeat(this.indent*2)+i);for(let i of s)this.content.push(i)}compile(){let e=Function,r=this?.args,o=[...(this?.content??[""]).map(s=>` ${s}`)];return new e(...r,o.join(`

11`))}};var Hh={major:4,minor:0,patch:0};var fe=E("$ZodType",(t,e)=>{var r;t??(t={}),t._zod.def=e,t._zod.bag=t._zod.bag||{},t._zod.version=Hh;let n=[...t._zod.def.checks??[]];t._zod.traits.has("$ZodCheck")&&n.unshift(t);for(let o of n)for(let s of o._zod.onattach)s(t);if(n.length===0)(r=t._zod).deferred??(r.deferred=[]),t._zod.deferred?.push(()=>{t._zod.run=t._zod.parse});else{let o=(s,i,a)=>{let c=xn(s),u;for(let f of i){if(f._zod.def.when){if(!f._zod.def.when(s))continue}else if(c)continue;let d=s.issues.length,y=f._zod.check(s);if(y instanceof Promise&&a?.async===!1)throw new dr;if(u||y insta ...

12 if (${h}.issues.length) {

13 if (input[${w}] === undefined) {

14 if (${w} in input) {

15 newResult[${w}] = undefined;

16 }

17 } else {

18 payload.issues = payload.issues.concat(

19 ${h}.issues.map((iss) => ({

20 ...iss,

21 path: iss.path ? [${w}, ...iss.path] : [${w}],

22 }))

23 );

24 }

25 } else if (${h}.value === undefined) {

26 if (${w} in input) newResult[${w}] = undefined;

27 } else {

28 newResult[${w}] = ${h}.value;

29 }

30 `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(`

31 if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({

32 ...iss,

33 path: iss.path ? [${wn(v)}, ...iss.path] : [${wn(v)}]

34 })));`),y.write(`newResult[${wn(v)}] = ${h}.value`)}y.write("payload.value = newResult;"),y.write("return payload;");let _=y.compile();return(v,h)=>_(d,v,h)},o,s=ro,i=!ni.jitless,c=i&&bc.value,u=e.catchall,f;t._zod.parse=(d,y)=>{f??(f=r.value);let p=d.value;if(!s(p))return d.issues.push({expected:"object",code:"invalid_type",input:p,inst:t}),d;let l=[];if(i&&c&&y?.async===!1&&y.jitless!==!0)o||(o=n(e.shape)),d=o(d,y);else{d.value={};let h=f.shape;for(let w of f.keys){let x=h[w],S=x._zod.run({value:p[w],issues:[]},y),I=x._zod.optin==="optional"&&x._zod.optout==="optional";S instanceof ...

36Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let f of this.seen.entries()){let d=f[1];if(e===f[0]){i(f);continue}if(n.external){let p=n.external.registry.get(f[0])?.id;if(e!==f[

37]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r

38]))`;continue}}if(r.s&&n[c]==="."){o+=i?`${n[c]}\r

39`:`[${n[c]}\r

40]`;continue}o+=n[c],n[c]==="\\"?s=!0:i&&n[c]==="]"?i=!1:!i&&n[c]==="["&&(i=!0)}try{new RegExp(o)}catch{return console.warn(`Could not convert regex pattern at ${e.currentPath.join("/")} to a flag-independent form! Falling back to the flag-ignorant source`),t.source}return o}function Ji(t,e){if(e.target===

42`}var Za=class{constructor(e=Fp.default.stdin,r=Fp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new La,this._started=!1,this._ondata=n=>{this._readBuffer.append(n),this.processReadBuffer()},this._onerror=n=>{this.onerror?.(n)}}async start(){if(this._started)throw new Error("StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.");this._started=!0,this._stdin.on("data",this._ondata),this._stdin.on("error",this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e) ...

43${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

44${o}

45${s}

46${i}`,c=sc.default.createHmac("sha256",r).update(a).digest("hex");return{"X-Punchlist-Timestamp":o,"X-Punchlist-Nonce":s,"X-Punchlist-Signature":c}}function gR(t,e,r){return(n,o)=>{let s=!1,i=/^[\d.]+$

48${o}`)}catch{r.push(n)}return{text:e.join(`

50---

52`),missing:r}}async function Zf(t){let r=(await Ne()).instructionSources?.[t.name]??{},n=[];for(let[o,s]of Object.entries(r))try{let{text:i}=await Mf(s.files),a=(0,Xs.createHash)("sha256").update(i).digest("hex");if(a===s.lastHash)continue;await Af(t,o,i),await Xp(t.name,o,{files:s.files,lastHash:a}),n.push(o)}catch{break}return n}async function jf(t){let r=(await Ne()).iconSources?.[t.name]??{};if(Object.keys(r).length===0)return[];let n=null,o=[];for(let[s,i]of Object.entries(r))try{let a=await tn.promises.readFile(i.file).catch(()=>null);if(!a)continue;let c=(0,Xs.createHash)("sha256").upda ...

54${a}`))}catch(s){return Ee(s)}}),t.registerTool("export_icloud_credentials",{title:"Export iCloud credentials for a remote environment",description:"Mint iCloud credentials for a headless/remote environment (cloud sandbox, CI, a Claude remote session) that can't open a browser to sign in itself. Runs the same Apple ID sign-in flow as connect_icloud on THIS machine, but mints a SEPARATE web-auth token and does NOT touch the local config \u2014 each export is an independent token lineage, so the remote environment and this machine never invalidate each other through token rotation. Returns the v ...

56${i}`))}catch(o){return Ee(o)}}),t.registerTool("list_pending_punchlists",{title:"List pending punchlists",description:'List unprocessed punchlist sessions. Merges the LAN device (GET /mcp/pending) with the iCloud source when connect_icloud has been run, so sessions show up even when the phone is off-LAN. Each item carries a `source` ("lan" or "cloud"); when the same session is on both, the LAN copy wins. If one source is unreachable the other still answers (see `sources_responded`/`source_errors`). Each item includes `target_app` \u2014 the app the session was recorded for \u2014 when the use ...

58---

60`),y=await Nf(c,e);if(o&&d){let l=(await Js(c)).find(m=>m.name===y)?.instructions;l&&(d=`${l}

Long lines were clipped for display.

Source & flagged code

4 flagged · loading source

dist/punchlist-mcp.cjsView file

41`);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),Q1(r)}clear(){this._buffer=void 0}};function Q1(t)... L42: `}var Za=class{constructor(e=Fp.default.stdin,r=Fp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new La,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

35L36: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let f of this.seen.entries()){let d=f[1];if(e===f[0]){i(f);continue}if(n.external){let p=n.ex... L37: ]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r ... L41: `);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),Q1(r)}clear(){this._buffer=void 0}};function Q1(t)... L42: `}var Za=class{constructor(e=Fp.default.stdin,r=Fp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new La,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

29} L30: `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(` L31: if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({ ... L35: L36: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let f of this.seen.entries()){let d=f[1];if(e===f[0]){i(f);continue}if(n.external){let p=n.ex... L37: ]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r ... L41: `);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),Q1(r)}clear(){this._buffer=void 0}};function Q1(t)... L42: `}var Za=class{constructor(e=Fp.default.stdin,r=Fp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new La,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

5|| (${i} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,K._)`+${o}`);return;case"boolean":n.elseIf((0,K._)`${o} === "false" || ${o} === 0 || ${o} === null`).as... L6: || ${i} === "boolean" || ${o} === null`).assign(a,(0,K._)`[${o}]`)}}}function qk({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,K._)`${e} !== undefined`,()=>t.assign((0,K._)`... L7: missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

Findings

3 High3 Medium7 Low

HighChild Processdist/punchlist-mcp.cjs

HighSame File Env Network Executiondist/punchlist-mcp.cjs

HighCommand Output Exfiltrationdist/punchlist-mcp.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/punchlist-mcp.cjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/punchlist-mcp.cjsView file

Lines 1-61javascript

1#!/usr/bin/env node

4 || (${i} == "string" && ${o} && ${o} == +${o})`).assign(a,(0,K._)`+${o}`);return;case"integer":n.elseIf((0,K._)`${i} === "boolean" || ${o} === null

6 || ${i} === "boolean" || ${o} === null`).assign(a,(0,K._)`[${o}]`)}}}function qk({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,K._)`${e} !== undefined`,()=>t.assign((0,K

7 missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

8 depsCount: ${e},

9 deps: ${r}}`};var xP={keyword:"dependencies",type:"object",schemaType:"object",error:Xt.error,code(t){let[e,r]=bP(t);D_(t,e),L_(t,r)}};function bP({schema:t}){let e={},r={};for(let n in

12 if (${h}.issues.length) {

13 if (input[${w}] === undefined) {

14 if (${w} in input) {

15 newResult[${w}] = undefined;

16 }

17 } else {

18 payload.issues = payload.issues.concat(

19 ${h}.issues.map((iss) => ({

20 ...iss,

21 path: iss.path ? [${w}, ...iss.path] : [${w}],

22 }))

23 );

24 }

25 } else if (${h}.value === undefined) {

26 if (${w} in input) newResult[${w}] = undefined;

27 } else {

28 newResult[${w}] = ${h}.value;

29 }

30 `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(`

31 if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({

32 ...iss,

33 path: iss.path ? [${wn(v)}, ...iss.path] : [${wn(v)}]

37]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r

38]))`;continue}}if(r.s&&n[c]==="."){o+=i?`${n[c]}\r

39`:`[${n[c]}\r

43${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

44${o}

45${s}

48${o}`)}catch{r.push(n)}return{text:e.join(`

50---

58---

60`),y=await Nf(c,e);if(o&&d){let l=(await Js(c)).find(m=>m.name===y)?.instructions;l&&(d=`${l}

Long lines were clipped for display.