registry / suppa-mcp-2 / 1.43.2
suppa-mcp-2@1.43.2
MCP server for the Suppa platform (modern.suppa.me) — Tasks, Docs/Pages, Entities & Schema, Forms, Automations, and file attachments, with multi-tenant Google auth. Node port of PyPI suppa-mcp.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package’s postinstall automatically installs project-local agent and schema guards in eligible Suppa projects. This is a guarded first-party agent setup risk, not source evidence of a concrete attack, so a warning is appropriate.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
Installing the package in a project that contains a Suppa dependency or entity/seed files, unless an opt-out or skip condition applies.
Impact
Agent file operations and turn completion may be subject to the added local schema checks; no credential transfer or remote execution was established.
Mechanism
The postinstall launches a helper that updates project agent settings and guidance, and manages Git, CI, and npm schema checks.
AI rationale
The package’s postinstall automatically installs project-local agent and schema guards in eligible Suppa projects. This is a guarded first-party agent setup risk, not source evidence of a concrete attack, so a warning is appropriate.
Evidence
package.jsonskills/suppa-entity-code/scripts/postinstall.mjsskills/suppa-entity-code/scripts/install-entity-code-guards.mjs.claude/settings.jsonAGENTS.mdCLAUDE.md.githooks/pre-commit.gitlab/suppa-schema-gate.yml
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The install helper targets the project’s Claude settings and adds hooks for file writes, edits, and turn completion.
- The npm postinstall can invoke the helper automatically, but skips when its opt-out is set, in CI, or for global installs.
- The helper only proceeds for projects with a Suppa dependency or entity/seed files.
- The helper also manages project-level agent guidance and Git, CI, and npm guard configuration.
Evidence against
- The automatic setup is limited to a project with Suppa schema code and has a documented opt-out.
- The inspected behavior installs local schema checks; it does not establish credential collection, data transfer, or remote code execution.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
12 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node skills/suppa-entity-code/scripts/postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgskills/suppa-form-v2/scripts/vue-compiler-diagnostics.mjsView file
9`,-1),e.hoists.length)){let f=[At,Ct,Xe,Rt,Cn].filter(h=>p.includes(h)).map(Wn).join(", ");i(`const { ${f} } = _Vue
L10: `,-1)}Ni(e.hoists,t),r(),i("return ")}function Et(e,t,{helper:n,push:s,newline:i,isTS:r}){let o=n(t==="filter"?Pt:t==="component"?Dt:Lt);for(let a=0;a<e.length;a++){let l=e[a],c=l....
L11: /*! Bundled license information:
Low
Findings
8 High5 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitydist/config.js
HighSemantic Analysis Limiteddist/selfcheck.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/auth.js
HighKnown Malware Source Similarityskills/suppa-entity-code/scripts/validate-suppa-schema.mjs
HighKnown Malware Source Similaritydist/selfcheck.js
HighKnown Malware Source Similarityskills/suppa-form-v2/scripts/card-kit/card-kit.mjs
HighPrevious Version Dangerous Deltaskills/suppa-entity-code/scripts/validate-suppa-schema.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/tools/entityCode.js
Medium
Affected versions and remediation
This report applies to suppa-mcp-2@1.43.2.
See all versions of suppa-mcp-2 for other recorded verdicts.
- Review the evidence and your use of suppa-mcp-2@1.43.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.