registry / slashvibe-mcp / 0.5.12

slashvibe-mcp@0.5.12

Social layer for Claude Code - DMs, presence, Matrix multiplayer rooms, and connection between AI-assisted developers

AI Security Review

scanned 19h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an MCP/social collaboration client with user-invoked setup, OAuth, local config writes, and package-aligned network calls.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs npx slashvibe-mcp, vibe-setup, or invokes MCP tools.

Impact

Registers /vibe MCP when explicitly run and exchanges user/auth/session data with slashvibe.dev; no install-time hijack or exfiltration found.

Mechanism

User-invoked MCP setup and runtime API client

Rationale

Static source inspection shows agent-facing and network capabilities aligned with the package purpose, activated by explicit CLI/MCP use rather than npm lifecycle execution. I found no unconsented install-time mutation, credential harvesting, destructive behavior, remote code execution, or exfiltration outside package-aligned APIs.

Evidence

package.jsoncli.jssetup.jsindex.jstools/init.jstools/_work-context.jstools/subscriptions.jsconfig.js~/.claude.json~/Library/Application Support/Claude/claude_desktop_config.json~/.config/claude/config.json~/AppData/Roaming/Claude/claude_desktop_config.json~/.vibe/config.json~/.vibe/.session_<pid>

Network endpoints5

www.slashvibe.devapi.twitter.comapi.telegram.orgdiscord.com/api/v10graph.facebook.com/v18.0

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no npm lifecycle hooks; bin entrypoints are cli.js and setup.js.
setup.js writes Claude MCP config only during user-invoked setup/TTY CLI flow, not install-time.
setup.js registers package-aligned MCP server command npx -y slashvibe-mcp@latest and stores auth under ~/.vibe/config.json.
index.js is an MCP server exposing vibe social/messaging tools; remote guest messages are displayed as external input with safety cautions.
tools/_work-context.js gathers limited git/project context with execFileSync shell:false, caps, and redaction.
tools/subscriptions.js sends the saved auth token only to configured slashvibe API for a user-invoked subscriptions tool.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 241 file(s), 1.86 MB of source, external domains: api.neynar.com, api.pinata.cloud, api.telegram.org, api.twitter.com, basescan.org, bridge.vibe.network, conduit.xyz, discord.com, docs.neynar.com, docs.slashvibe.dev, eth.llamarpc.com, etherscan.io, example.com, explorer-testnet.vibe.network, explorer.vibe.network, fonts.googleapis.com, fonts.gstatic.com, github.com, graph.facebook.com, mainnet.base.org, my-project.vercel.app, neynar.com, opensea.io, rpc-testnet.vibe.network, rpc.vibe.network, sepolia.base.org, sepolia.basescan.org, slashvibe.dev, testnets.opensea.io, twitter.com, vibe.fyi, warpcast.com, www.slashvibe.dev, x.com, your-domain.com, yourapp.vercel.app

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

100// ═══════════════════════════════════════════════════════════════════════════

101// INTEGRATION TESTS: Git info gathering

102// ═══════════════════════════════════════════════════════════════════════════

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = slashvibe-mcp@0.5.11 matchedIdentity = npm:c2xhc2h2aWJlLW1jcA:0.5.11 similarity = 0.992 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <

Source & flagged code

7 flagged · loading source

tools/_work-context.test.jsView file

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

twitter.jsView file

39.update(signatureBaseString) L40: .digest('base64'); L41: } ... L80: async function xRequest(method, endpoint, params = {}, body = null) { L81: const baseUrl = 'https://api.twitter.com'; L82: const url = `${baseUrl}${endpoint}`; ... L89: const fetchUrl = method === 'GET' && Object.keys(params).length > 0 L90: ? `${url}?${new URLSearchParams(params)}` L91: : url;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

twitter.jsView on unpkg · L39

tools/subscriptions.jsView file

39const token = config.getToken(); L40: const apiUrl = process.env.VIBE_API_URL || 'https://www.slashvibe.dev'; L41: ... L51: L52: const result = await response.json(); L53: ... L72: `.trim(), L73: data: result L74: };

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

tools/subscriptions.jsView on unpkg · L39

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

77patternName = github_pat severity = critical line = 77 matchedText = { input:...' },

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.manual-test.js

tools/_work-context.manual-test.jsView on unpkg · L77

Findings

4 Critical1 High4 Medium5 Low

CriticalCritical Secrettools/_work-context.test.js

CriticalPrevious Version Dangerous Deltatools/init.js

CriticalSecret Patterntools/_work-context.test.js

CriticalSecret Patterntools/_work-context.manual-test.js

HighCredential Exfiltrationtools/subscriptions.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/check-guest-messages.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptotwitter.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

101// INTEGRATION TESTS: Git info gathering

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <