registry / slashvibe-mcp / 0.5.13

slashvibe-mcp@0.5.13

Social layer for Claude Code - DMs, presence, Matrix multiplayer rooms, and connection between AI-assisted developers

AI Security Review

scanned 11h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an MCP social/collaboration server with user-invoked setup and authenticated runtime network features.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs npx slashvibe-mcp setup or configures/runs the MCP server.

Impact

Registers the vibe MCP server, stores vibe auth/session data, and exchanges presence/messages with configured services.

Mechanism

user-invoked MCP setup and package-aligned API communication

Rationale

The risky primitives are aligned with an explicitly invoked MCP collaboration tool and are not delivered through npm lifecycle execution or hidden import-time control-surface mutation. Source inspection found user-visible setup, package-owned config/state, and package-aligned network behavior rather than credential theft, persistence, destructive behavior, or unconsented agent control hijack.

Evidence

package.jsoncli.jssetup.jsindex.jspresence.jsconfig.jsstore/api.jstools/init.jstools/cc-insights.jstools/lib/git-bundle.jstools/_work-context.test.js~/.claude.json~/Library/Application Support/Claude/claude_desktop_config.json~/.config/claude/config.json~/AppData/Roaming/Claude/claude_desktop_config.json~/.vibe/config.json~/.vibe/auth.json~/.vibe/.session_<pid>

Network endpoints11

www.slashvibe.devslashvibe.devlocalhost:9876localhost:7544api.twitter.comx.comapi.neynar.com/v2rpc.vibe.networkrpc-testnet.vibe.networkexplorer.vibe.networkexplorer-testnet.vibe.network

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for block

setup.js user-invoked setup writes Claude MCP config under home config paths and registers npx slashvibe-mcp@latest.
index.js starts presence heartbeat and guest-message polling when run as MCP server for an initialized user.
tools/cc-insights.js can upload Claude Code insight JSON, but only via explicit vibe_cc_upload tool.

Evidence against

package.json has no preinstall/install/postinstall lifecycle hooks.
cli.js routes TTY use to setup.js or MCP server; no install-time execution.
Network calls are package-aligned to slashvibe.dev, local OAuth callback, Matrix local bot, Twitter/X, Farcaster, Telegram, Discord, and Vibe L2 endpoints.
tools/_work-context.test.js contains synthetic secret patterns for redaction tests, not live credentials.
config.js stores package auth/session state in ~/.vibe and does not harvest unrelated credentials.
No broad lifecycle mutation, persistence hook, destructive action, or remote code execution found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 242 file(s), 1.88 MB of source, external domains: api.neynar.com, api.pinata.cloud, api.telegram.org, api.twitter.com, basescan.org, bridge.vibe.network, conduit.xyz, discord.com, docs.neynar.com, docs.slashvibe.dev, eth.llamarpc.com, etherscan.io, example.com, explorer-testnet.vibe.network, explorer.vibe.network, fonts.googleapis.com, fonts.gstatic.com, github.com, graph.facebook.com, mainnet.base.org, my-project.vercel.app, neynar.com, opensea.io, rpc-testnet.vibe.network, rpc.vibe.network, sepolia.base.org, sepolia.basescan.org, slashvibe.dev, testnets.opensea.io, twitter.com, vibe.fyi, warpcast.com, www.slashvibe.dev, x.com, your-domain.com, yourapp.vercel.app

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

100// ═══════════════════════════════════════════════════════════════════════════

101// INTEGRATION TESTS: Git info gathering

102// ═══════════════════════════════════════════════════════════════════════════

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = slashvibe-mcp@0.5.12 matchedIdentity = npm:c2xhc2h2aWJlLW1jcA:0.5.12 similarity = 0.975 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <

Source & flagged code

7 flagged · loading source

tools/_work-context.test.jsView file

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

twitter.jsView file

39.update(signatureBaseString) L40: .digest('base64'); L41: } ... L80: async function xRequest(method, endpoint, params = {}, body = null) { L81: const baseUrl = 'https://api.twitter.com'; L82: const url = `${baseUrl}${endpoint}`; ... L89: const fetchUrl = method === 'GET' && Object.keys(params).length > 0 L90: ? `${url}?${new URLSearchParams(params)}` L91: : url;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

twitter.jsView on unpkg · L39

tools/subscriptions.jsView file

39const token = config.getToken(); L40: const apiUrl = process.env.VIBE_API_URL || 'https://www.slashvibe.dev'; L41: ... L51: L52: const result = await response.json(); L53: ... L72: `.trim(), L73: data: result L74: };

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

tools/subscriptions.jsView on unpkg · L39

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

77patternName = github_pat severity = critical line = 77 matchedText = { input:...' },

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.manual-test.js

tools/_work-context.manual-test.jsView on unpkg · L77

Findings

4 Critical1 High4 Medium5 Low

CriticalCritical Secrettools/_work-context.test.js

CriticalPrevious Version Dangerous Deltatools/init.js

CriticalSecret Patterntools/_work-context.test.js

CriticalSecret Patterntools/_work-context.manual-test.js

HighCredential Exfiltrationtools/subscriptions.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/check-guest-messages.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptotwitter.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

101// INTEGRATION TESTS: Git info gathering

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/init.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/init.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <