registry / punchlist-mcp / 0.5.0

punchlist-mcp@0.5.0

MCP companion server for Punchlist — discover a Punchlist iOS device on your LAN and pull voice-narrated screen sessions (screenshots + synchronized transcripts) straight into Claude or any MCP client.

Static Scan Results

scanned 13h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 468 KB of source, external domains: github.com, icloud.developer.apple.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

4 flagged

dist/punchlist-mcp.cjsView file

Lines 1-61javascript

1#!/usr/bin/env node

2var Yw=Object.create;var xc=Object.defineProperty;var Qw=Object.getOwnPropertyDescriptor;var ex=Object.getOwnPropertyNames;var tx=Object.getPrototypeOf,rx=Object.prototype.hasOwnProperty;var $=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),bc=(t,e)=>{for(var r in e)xc(t,r,{get:e[r],enumerable:!0})},nx=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of ex(e))!rx.call(t,o)&&o!==r&&xc(t,o,{get:()=>e[o],enumerable:!(n=Qw(e,o))||n.enumerable});return t};var at=(t,e,r)=>(r=t!=null?Yw(tx(t)):{},nx(e||!t||!t.__esModule?xc(r,"default",{value:t,enumerable:!0}):r,t));var ys= ...

3`:""},this._extScope=e,this._scope=new Zt.Scope({parent:e}),this._nodes=[new hd]}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){return this._extScope.name(e)}scopeValue(e,r){let n=this._extScope.value(e,r);return(this._values[n.prefix]||(this._values[n.prefix]=new Set)).add(n),n}getScopeValue(e,r){return this._extScope.getValue(e,r)}scopeRefs(e){return this._extScope.scopeRefs(e,this._values)}scopeCode(){return this._extScope.scopeCode(this._values)}_def(e,r,n,o){let s=this._scope.toName(r);return n!==void 0&&o&&(this._constants[s.str]=n),this._l ...

4 || (${i} == "string" && ${o} && ${o} == +${o})`).assign(a,(0,G._)`+${o}`);return;case"integer":n.elseIf((0,G._)`${i} === "boolean" || ${o} === null

6 || ${i} === "boolean" || ${o} === null`).assign(a,(0,G._)`[${o}]`)}}}function eT({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,G._)`${e} !== undefined`,()=>t.assign((0,G

7 missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

8 depsCount: ${e},

9 deps: ${r}}`};var CP={keyword:"dependencies",type:"object",schemaType:"object",error:Yt.error,code(t){let[e,r]=NP(t);U_(t,e),q_(t,r)}};function NP({schema:t}){let e={},r={};for(let n

10`).filter(i=>i),o=Math.min(...n.map(i=>i.length-i.trimStart().length)),s=n.map(i=>i.slice(o)).map(i=>" ".repeat(this.indent*2)+i);for(let i of s)this.content.push(i)}compile(){let e=Function,r=this?.args,o=[...(this?.content??[""]).map(s=>` ${s}`)];return new e(...r,o.join(`

11`))}};var Xh={major:4,minor:0,patch:0};var he=E("$ZodType",(t,e)=>{var r;t??(t={}),t._zod.def=e,t._zod.bag=t._zod.bag||{},t._zod.version=Xh;let n=[...t._zod.def.checks??[]];t._zod.traits.has("$ZodCheck")&&n.unshift(t);for(let o of n)for(let s of o._zod.onattach)s(t);if(n.length===0)(r=t._zod).deferred??(r.deferred=[]),t._zod.deferred?.push(()=>{t._zod.run=t._zod.parse});else{let o=(s,i,a)=>{let c=Sn(s),u;for(let d of i){if(d._zod.def.when){if(!d._zod.def.when(s))continue}else if(c)continue;let p=s.issues.length,y=d._zod.check(s);if(y instanceof Promise&&a?.async===!1)throw new hr;if(u||y insta ...

12 if (${h}.issues.length) {

13 if (input[${w}] === undefined) {

14 if (${w} in input) {

15 newResult[${w}] = undefined;

16 }

17 } else {

18 payload.issues = payload.issues.concat(

19 ${h}.issues.map((iss) => ({

20 ...iss,

21 path: iss.path ? [${w}, ...iss.path] : [${w}],

22 }))

23 );

24 }

25 } else if (${h}.value === undefined) {

26 if (${w} in input) newResult[${w}] = undefined;

27 } else {

28 newResult[${w}] = ${h}.value;

29 }

30 `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(`

31 if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({

32 ...iss,

33 path: iss.path ? [${$n(v)}, ...iss.path] : [${$n(v)}]

34 })));`),y.write(`newResult[${$n(v)}] = ${h}.value`)}y.write("payload.value = newResult;"),y.write("return payload;");let _=y.compile();return(v,h)=>_(p,v,h)},o,s=so,i=!li.jitless,c=i&&Rc.value,u=e.catchall,d;t._zod.parse=(p,y)=>{d??(d=r.value);let f=p.value;if(!s(f))return p.issues.push({expected:"object",code:"invalid_type",input:f,inst:t}),p;let l=[];if(i&&c&&y?.async===!1&&y.jitless!==!0)o||(o=n(e.shape)),p=o(p,y);else{p.value={};let h=d.shape;for(let w of d.keys){let x=h[w],S=x._zod.run({value:f[w],issues:[]},y),I=x._zod.optin==="optional"&&x._zod.optout==="optional";S instanceof ...

36Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let d of this.seen.entries()){let p=d[1];if(e===d[0]){i(d);continue}if(n.external){let f=n.external.registry.get(d[0])?.id;if(e!==d[

37]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r

38]))`;continue}}if(r.s&&n[c]==="."){o+=i?`${n[c]}\r

39`:`[${n[c]}\r

40]`;continue}o+=n[c],n[c]==="\\"?s=!0:i&&n[c]==="]"?i=!1:!i&&n[c]==="["&&(i=!0)}try{new RegExp(o)}catch{return console.warn(`Could not convert regex pattern at ${e.currentPath.join("/")} to a flag-independent form! Falling back to the flag-ignorant source`),t.source}return o}function na(t,e){if(e.target===

42`}var Va=class{constructor(e=Qp.default.stdin,r=Qp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ba,this._started=!1,this._ondata=n=>{this._readBuffer.append(n),this.processReadBuffer()},this._onerror=n=>{this.onerror?.(n)}}async start(){if(this._started)throw new Error("StdioServerTransport already started! If using Server class, note that connect() calls start() automatically.");this._started=!0,this._stdin.on("data",this._ondata),this._stdin.on("error",this._onerror)}processReadBuffer(){for(;;)try{let e=this._readBuffer.readMessage();if(e===null)break;this.onmessage?.(e) ...

43${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

44${o}

45${s}

46${i}`,c=fc.default.createHmac("sha256",r).update(a).digest("hex");return{"X-Punchlist-Timestamp":o,"X-Punchlist-Nonce":s,"X-Punchlist-Signature":c}}function CR(t,e,r){return(n,o)=>{let s=!1,i=/^[\d.]+$

48${o}`)}catch{r.push(n)}return{text:e.join(`

50---

52`),missing:r}}async function Bf(t){let r=(await Ie()).instructionSources?.[t.name]??{},n=[];for(let[o,s]of Object.entries(r))try{let{text:i}=await oi(s.files),a=(0,sn.createHash)("sha256").update(i).digest("hex");if(a===s.lastHash)continue;await gc(t,o,i),await Ya(t.name,o,{files:s.files,lastHash:a}),n.push(o)}catch{break}return n}async function Vf(t){let r=(await Ie()).iconSources?.[t.name]??{};if(Object.keys(r).length===0)return[];let n=null,o=[];for(let[s,i]of Object.entries(r))try{let a=await Cr.promises.readFile(i.file).catch(()=>null);if(!a)continue;let c=(0,sn.createHash)("sha256").upda ...

54${c}`))}catch(i){return le(i)}}),t.registerTool("export_icloud_credentials",{title:"Export iCloud credentials for a remote environment",description:"Mint iCloud credentials for a headless/remote environment (cloud sandbox, CI, a Claude remote session) that can't open a browser to sign in itself. Runs the same Apple ID sign-in flow as connect_icloud on THIS machine, but mints a SEPARATE web-auth token and does NOT touch the local config \u2014 each export is an independent token lineage, so the remote environment and this machine never invalidate each other through token rotation. Returns the v ...

56${i}`))}catch(o){return le(o)}}),t.registerTool("list_pending_punchlists",{title:"List pending punchlists",description:'List unprocessed punchlist sessions. Merges the LAN device (GET /mcp/pending) with the iCloud source when connect_icloud has been run, so sessions show up even when the phone is off-LAN. Each item carries a `source` ("lan" or "cloud"); when the same session is on both, the LAN copy wins. If one source is unreachable the other still answers (see `sources_responded`/`source_errors`). Each item includes `target_app` \u2014 the app the session was recorded for \u2014 when the use ...

58---

60`);if(f.length>6e4)return le(new Error(`Instructions are ${f.length} characters; keep them under 60k so they stay useful as context.`));if(await gc(c,u,f),d.instructions_chars=f.length,s&&o&&o.length>0){let{text:l}=await oi(o),m=(

Long lines were clipped for display.

Source & flagged code

4 flagged · loading source

dist/punchlist-mcp.cjsView file

41`);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),dO(r)}clear(){this._buffer=void 0}};function dO(t)... L42: `}var Va=class{constructor(e=Qp.default.stdin,r=Qp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ba,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

35L36: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let d of this.seen.entries()){let p=d[1];if(e===d[0]){i(d);continue}if(n.external){let f=n.ex... L37: ]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r ... L41: `);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),dO(r)}clear(){this._buffer=void 0}};function dO(t)... L42: `}var Va=class{constructor(e=Qp.default.stdin,r=Qp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ba,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

29} L30: `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(` L31: if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({ ... L35: L36: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let d of this.seen.entries()){let p=d[1];if(e===d[0]){i(d);continue}if(n.external){let f=n.ex... L37: ]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r ... L41: `);if(e===-1)return null;let r=this._buffer.toString("utf8",0,e).replace(/\r$/,"");return this._buffer=this._buffer.subarray(e+1),dO(r)}clear(){this._buffer=void 0}};function dO(t)... L42: `}var Va=class{constructor(e=Qp.default.stdin,r=Qp.default.stdout){this._stdin=e,this._stdout=r,this._readBuffer=new Ba,this._started=!1,this._ondata=n=>{this._readBuffer.append(n)... L43: ${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

5|| (${i} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,G._)`+${o}`);return;case"boolean":n.elseIf((0,G._)`${o} === "false" || ${o} === 0 || ${o} === null`).as... L6: || ${i} === "boolean" || ${o} === null`).assign(a,(0,G._)`[${o}]`)}}}function eT({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,G._)`${e} !== undefined`,()=>t.assign((0,G._)`... L7: missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

Findings

3 High3 Medium7 Low

HighChild Processdist/punchlist-mcp.cjs

HighSame File Env Network Executiondist/punchlist-mcp.cjs

HighCommand Output Exfiltrationdist/punchlist-mcp.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/punchlist-mcp.cjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/punchlist-mcp.cjsView file

Lines 1-61javascript

1#!/usr/bin/env node

4 || (${i} == "string" && ${o} && ${o} == +${o})`).assign(a,(0,G._)`+${o}`);return;case"integer":n.elseIf((0,G._)`${i} === "boolean" || ${o} === null

6 || ${i} === "boolean" || ${o} === null`).assign(a,(0,G._)`[${o}]`)}}}function eT({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,G._)`${e} !== undefined`,()=>t.assign((0,G

7 missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/punchlist-mcp.cjsView on unpkg · L5

8 depsCount: ${e},

9 deps: ${r}}`};var CP={keyword:"dependencies",type:"object",schemaType:"object",error:Yt.error,code(t){let[e,r]=NP(t);U_(t,e),q_(t,r)}};function NP({schema:t}){let e={},r={};for(let n

12 if (${h}.issues.length) {

13 if (input[${w}] === undefined) {

14 if (${w} in input) {

15 newResult[${w}] = undefined;

16 }

17 } else {

18 payload.issues = payload.issues.concat(

19 ${h}.issues.map((iss) => ({

20 ...iss,

21 path: iss.path ? [${w}, ...iss.path] : [${w}],

22 }))

23 );

24 }

25 } else if (${h}.value === undefined) {

26 if (${w} in input) newResult[${w}] = undefined;

27 } else {

28 newResult[${w}] = ${h}.value;

29 }

30 `)}else{let h=m[v];y.write(`const ${h} = ${l(v)};`),y.write(`

31 if (${h}.issues.length) payload.issues = payload.issues.concat(${h}.issues.map(iss => ({

32 ...iss,

33 path: iss.path ? [${$n(v)}, ...iss.path] : [${$n(v)}]

37]))`;continue}else if(n[c]==="$"){o+=`($|(?=[\r

38]))`;continue}}if(r.s&&n[c]==="."){o+=i?`${n[c]}\r

39`:`[${n[c]}\r

43${e}

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/punchlist-mcp.cjsView on unpkg · L29

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/punchlist-mcp.cjsView on unpkg · L35

High

Child Process

Package source references child process execution.

dist/punchlist-mcp.cjsView on unpkg · L41

44${o}

45${s}

48${o}`)}catch{r.push(n)}return{text:e.join(`

50---

58---

Long lines were clipped for display.