registry / video-transcriber-mcp / 2.0.0

video-transcriber-mcp@2.0.0

High-performance MCP server for transcribing videos from 1000+ platforms (YouTube, Vimeo, TikTok, Twitter, etc.) or local video files using whisper.cpp (4-10x faster than Python whisper)

AI Security Review

scanned 10h ago · by lpm-firewall-ai

The stdio MCP server exposes unrestricted file reads to its connected client. Its cleanup tools can delete files from any caller-provided directory.

Static reason

No blocking static signals were detected.

Trigger

A connected MCP client sends a read-resource or deletion tool request.

Impact

Local file disclosure to the MCP client and deletion of files outside the transcript directory.

Mechanism

Unvalidated file URI and output-directory handling.

Rationale

The package is not malicious by source intent, but it contains a material arbitrary local-read and destructive-directory capability exposed through MCP. Warn rather than block.

Evidence

dist/index.jsdist/transcriber.jspackage.jsonscripts/download-models.sh

Decision evidence

public snapshot

AI called this Suspicious at 92.0% confidence as Critical Vulnerability with medium false-positive risk.

Evidence for warning

dist/index.js:234-247 reads any file:// URI without restricting it to transcripts.
dist/index.js:493-517 deletes all regular files in caller-supplied output_dir after confirmation.

video-transcriber-mcp@2.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code