registry / roblox-mcp-difz / 1.4.4

roblox-mcp-difz@1.4.4

Universal MCP server for Roblox game control, reverse engineering, and exploitation — supports Claude Code, Claude Desktop, Cursor, Windsurf, and any MCP-compatible AI.

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 988 KB of source, external domains: 127.0.0.1, assetgame.roblox.com

Source & flagged code

1 flagged

dist/session-manager.jsView file

Lines 1-22javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3const { v4: uuidv4 } = require('uuid');

4class SessionManager {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/session-manager.jsView on unpkg · L2

5 constructor() {

6 this.sessions = new Map();

7 this._startCleanup();

8 }

9 destroy() {

10 if (this._cleanupTimer) {

11 clearInterval(this._cleanupTimer);

12 this._cleanupTimer = undefined;

13 }

14 this.sessions.clear();

15 }

16 register(workerId, info) {

17 const existing = this.sessions.get(workerId);

18 const isNew = !existing;

19 this.sessions.set(workerId, {

20 workerId,

21 pid: (info && info.pid) || (existing && existing.pid),

22 name: (info && info.name) || (existing && existing.name) || '',

Source & flagged code

1 flagged · loading source

dist/session-manager.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code