github TypeScript re-analysis due

cyanheads/cpsc-recalls-mcp-server

github

Search and retrieve US consumer product recalls from the CPSC (Consumer Product Safety Commission) via MCP. STDIO or Streamable HTTP.

maintainer
cyanheads
licence
Apache-2.0
first seen
2026-06-12
last seen
2026-08-25
releases · 30d
1
short id

Drift inferred · capture-to-capture

tool count over time

06-13 21:04 now
3t
10t
capabilities 3 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 3 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • cpsc_get_recall
  • cpsc_get_recent
  • cpsc_search_recalls
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 55e01dc · analyzer v33 · 2w ago

skills & prompt files 34

code evidence vv0.1.6 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 26

filesystem 15

  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/build-changelog.ts :32 import { existsSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/build.ts :17 import { readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-dependency-specifiers.ts :38 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-docs-sync.ts :22 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-framework-antipatterns.ts :39 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-skill-versions.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-skills-sync.ts :37 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/clean-mcpb.ts :29 import { existsSync, statSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/clean.ts :15 import { readdir, rm } from 'node:fs/promises';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/devcheck.ts :3 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/lint-mcp.ts :19 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/lint-packaging.ts :52 import { existsSync, readdirSync, readFileSync } from 'node:fs';
show 3 more
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/list-skills.ts :21 import { existsSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/release-github.ts :33 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/tree.ts :24 import type { Dirent } from 'node:fs';

shell / exec 7

  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/build.ts :16 import { execFile } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-framework-antipatterns.ts :38 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/check-skill-versions.ts :32 import { spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/clean-mcpb.ts :28 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/devcheck.ts :2 import { type ChildProcess, spawn, spawnSync } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/lint-packaging.ts :51 import { execFileSync } from 'node:child_process';
  • shell (weak) cyanheads-cpsc-recalls-mcp-server-55e01dc/scripts/release-github.ts :32 import { spawnSync } from 'node:child_process';

tool registrations 3

  • cpsc_get_recall cyanheads-cpsc-recalls-mcp-server-55e01dc/src/mcp-server/tools/definitions/cpsc-get-recall.tool.ts :42
  • cpsc_get_recent cyanheads-cpsc-recalls-mcp-server-55e01dc/src/mcp-server/tools/definitions/cpsc-get-recent.tool.ts :27
  • cpsc_search_recalls cyanheads-cpsc-recalls-mcp-server-55e01dc/src/mcp-server/tools/definitions/cpsc-search-recalls.tool.ts :23

declared dependencies 11

  • @cyanheads/mcp-ts-core@^0.11.0
  • pino-pretty@^13.1.3
  • zod@^4.4.3
  • @biomejs/biome@^2.5.5
  • @socketsecurity/bun-security-scanner@^1.1.2
  • @types/node@^26.1.1
  • depcheck@^1.4.7
  • ignore@^7.0.6
  • tsc-alias@^1.9.1
  • typescript@^7.0.2
  • vitest@^4.1.10