registry / slashvibe-mcp / 0.5.15

slashvibe-mcp@0.5.15

Social layer for Claude Code - DMs, presence, Matrix multiplayer rooms, and connection between AI-assisted developers

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a Claude/MCP social collaboration server with user-invoked setup and package-aligned network activity.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs slashvibe-mcp as MCP server or explicitly runs setup/vibe_start tools.

Impact

Package-aligned presence, messaging, auth, and collaboration features; no install-time hijack, credential harvesting, or foreign control-surface mutation found.

Mechanism

MCP tools, OAuth token storage, slashvibe.dev API requests, optional user-invoked Claude MCP config update

Rationale

Static inspection found agent/MCP capabilities and networked collaboration features, but they are package-aligned, user-invoked, and not delivered by install-time lifecycle hooks. Scanner hints map to documented auth/API flows and redacted work-context sharing rather than concrete malware or unconsented control-surface hijack.

Evidence

package.jsoncli.jssetup.jsindex.jsconfig.jstools/start.jstools/_work-context.jstools/subscriptions.jsstore/api.js~/.claude.json~/Library/Application Support/Claude/claude_desktop_config.json~/.config/claude/config.json~/AppData/Roaming/Claude/claude_desktop_config.json~/.vibe/config.json~/.vibe/auth.json~/.vibe/.session_<pid>~/.vibe/vibe-repo

Network endpoints6

www.slashvibe.devslashvibe.devapi.twitter.comdiscord.com/api/v10graph.facebook.com/v18.0api.neynar.com/v2

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no npm lifecycle hooks; only bin entries cli.js/setup.js and main index.js.
setup.js writes Claude MCP config only when invoked via CLI setup/TTY, not at install time.
setup.js registers package-aligned MCP server command npx -y slashvibe-mcp@latest and saves auth under ~/.vibe/config.json.
index.js starts an MCP server and exposes social/presence/message tools; network calls target slashvibe.dev API.
tools/_work-context.js gathers limited git/project metadata with execFileSync, redaction, basename-only files, and timeout.
tools/subscriptions.js sends stored auth token only to configured slashvibe.dev subscription endpoint.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 243 file(s), 1.89 MB of source, external domains: api.neynar.com, api.pinata.cloud, api.telegram.org, api.twitter.com, basescan.org, bridge.vibe.network, conduit.xyz, discord.com, docs.neynar.com, docs.slashvibe.dev, eth.llamarpc.com, etherscan.io, example.com, explorer-testnet.vibe.network, explorer.vibe.network, fonts.googleapis.com, fonts.gstatic.com, github.com, graph.facebook.com, mainnet.base.org, my-project.vercel.app, neynar.com, opensea.io, rpc-testnet.vibe.network, rpc.vibe.network, sepolia.base.org, sepolia.basescan.org, slashvibe.dev, testnets.opensea.io, twitter.com, vibe.fyi, warpcast.com, www.slashvibe.dev, x.com, your-domain.com, yourapp.vercel.app

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

100// ═══════════════════════════════════════════════════════════════════════════

101// INTEGRATION TESTS: Git info gathering

102// ═══════════════════════════════════════════════════════════════════════════

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/start.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = slashvibe-mcp@0.5.13 matchedIdentity = npm:c2xhc2h2aWJlLW1jcA:0.5.13 similarity = 0.983 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/start.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <

Source & flagged code

7 flagged · loading source

tools/_work-context.test.jsView file

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

83patternName = github_pat severity = critical line = 83 matchedText = const in...90';

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

twitter.jsView file

39.update(signatureBaseString) L40: .digest('base64'); L41: } ... L80: async function xRequest(method, endpoint, params = {}, body = null) { L81: const baseUrl = 'https://api.twitter.com'; L82: const url = `${baseUrl}${endpoint}`; ... L89: const fetchUrl = method === 'GET' && Object.keys(params).length > 0 L90: ? `${url}?${new URLSearchParams(params)}` L91: : url;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

twitter.jsView on unpkg · L39

tools/subscriptions.jsView file

39const token = config.getToken(); L40: const apiUrl = process.env.VIBE_API_URL || 'https://www.slashvibe.dev'; L41: ... L51: L52: const result = await response.json(); L53: ... L72: `.trim(), L73: data: result L74: };

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

tools/subscriptions.jsView on unpkg · L39

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/start.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/start.jsView on unpkg

tools/_work-context.manual-test.jsView file

77patternName = github_pat severity = critical line = 77 matchedText = { input:...' },

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.manual-test.js

tools/_work-context.manual-test.jsView on unpkg · L77

Findings

4 Critical1 High4 Medium5 Low

CriticalCritical Secrettools/_work-context.test.js

CriticalPrevious Version Dangerous Deltatools/start.js

CriticalSecret Patterntools/_work-context.test.js

CriticalSecret Patterntools/_work-context.manual-test.js

HighCredential Exfiltrationtools/subscriptions.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/check-guest-messages.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptotwitter.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

tools/_work-context.test.jsView file

Lines 63-103javascript

63 });

64});

66describe('redact()', () => {

67 test('redacts email addresses', () => {

68 const input = 'Contact me at user@example.com';

69 assert.strictEqual(redact(input), 'Contact me at [REDACTED]');

70 });

72 test('redacts long hex strings (tokens)', () => {

73 const input = 'Value: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6';

74 assert.strictEqual(redact(input), 'Value: [REDACTED]');

75 });

77 test('redacts OpenAI API keys', () => {

78 const input = 'Key: sk-1234567890abcdefghij1234567890';

79 assert.strictEqual(redact(input), 'Key: [REDACTED]');

80 });

82 test('redacts GitHub tokens', () => {

83 const input = 'ghp_abcdefghijklmnopqrstuvwxyz1234567890';

Critical

Critical Secret

Package contains a critical-looking secret pattern.

tools/_work-context.test.jsView on unpkg · L83

Critical

Secret Pattern

GitHub personal access token in tools/_work-context.test.js

tools/_work-context.test.jsView on unpkg · L83

84 assert.strictEqual(redact(input), '[REDACTED]');

85 });

87 test('redacts sensitive words', () => {

88 const words = ['password', 'secret', 'token', 'api_key'];

89 words.forEach(word => {

90 assert.ok(redact(`My ${word} is hidden`).includes('[REDACTED]'));

91 });

92 });

94 test('handles null/undefined', () => {

95 assert.strictEqual(redact(null), null);

96 assert.strictEqual(redact(undefined), undefined);

97 });

98});

101// INTEGRATION TESTS: Git info gathering

103

twitter.jsView file

Lines 19-59javascript

20/**

21 * Generate OAuth 1.0a signature

22 */

23function generateOAuthSignature(method, url, params, consumerSecret, tokenSecret) {

24 const signatureBaseString = [

25 method.toUpperCase(),

tools/subscriptions.jsView file

Lines 19-59javascript

19 inputSchema: {

20 type: 'object',

21 properties: {

22 include_expired: {

23 type: 'boolean',

24 description: 'Include expired/cancelled subscriptions (default: false)'

25 }

26 }

hooks/check-guest-messages.shView file

•path = hooks/check-guest-messages.sh kind = build_helper sizeBytes = 7800 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/check-guest-messages.shView on unpkg

tools/start.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

tools/start.jsView on unpkg

tools/_work-context.manual-test.jsView file

Lines 57-97javascript

57 const elapsed2 = Date.now() - start2;

58 console.log(`✓ Fallback gather: ${elapsed2}ms (should have fallback data)`);

59 console.log(' Fallback brief:', ctx2.suggestions?.brief);

61 const test2Pass = elapsed1 <