MCP Observatory
github analyzed bad0569

zoharbabin/google-researcher-mcp

github

⚠️ DEPRECATED — Use https://github.com/zoharbabin/web-researcher-mcp instead

maintainer
zoharbabin
license
MIT
first seen
2026-06-01
last seen
2026-06-10
releases · 30d
1
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in zoharbabin/google-researcher-mcp
capabilities0 tools
transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit bad0569 · analyzer v17 · 5h ago

skills & prompt files 1

danger signals1

code evidencevv7.0.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 6

  • fs zoharbabin-google-researcher-mcp-bad0569/src/cache/persistenceManager.ts :2 import fs from 'fs/promises';
  • fs zoharbabin-google-researcher-mcp-bad0569/src/cache/persistentCache.ts :7 import fs from 'node:fs';
  • fs zoharbabin-google-researcher-mcp-bad0569/src/shared/eventPersistenceManager.ts :3 import * as fsPromises from 'node:fs/promises'; // Use promises for async operations
  • fs zoharbabin-google-researcher-mcp-bad0569/src/shared/persistentEventStore.ts :8 import * as fs from 'node:fs/promises';
  • fs zoharbabin-google-researcher-mcp-bad0569/src/shared/testCleanup.ts :4 import fs from 'node:fs/promises';
  • fs zoharbabin-google-researcher-mcp-bad0569/src/youtube/transcriptExtractor.ts :18 import { mkdtemp, readFile, rm } from "node:fs/promises";

shell / exec 1

  • shell zoharbabin-google-researcher-mcp-bad0569/src/youtube/transcriptExtractor.ts :16 import { execFile as execFileCb } from "node:child_process";

network 3

  • net zoharbabin-google-researcher-mcp-bad0569/src/shared/urlValidator.ts :17 import { isIP } from 'node:net';
  • net zoharbabin-google-researcher-mcp-bad0569/src/tools/academicSearch.ts :588 const response = await fetch(url, {
  • net zoharbabin-google-researcher-mcp-bad0569/src/tools/patentSearch.ts :349 const response = await fetch(searchUrl, { signal: AbortSignal.timeout(30_000) });

secrets 3

  • secrets zoharbabin-google-researcher-mcp-bad0569/jest.setup.js :40 process.env.GOOGLE_CUSTOM_SEARCH_API_KEY = 'AIzaSyTEST_KEY_FOR_UNIT_TESTS_123456789';
  • secrets zoharbabin-google-researcher-mcp-bad0569/src/tools/academicSearch.ts :518 const apiKey = process.env.GOOGLE_CUSTOM_SEARCH_API_KEY;
  • secrets zoharbabin-google-researcher-mcp-bad0569/src/tools/patentSearch.ts :192 const apiKey = process.env.GOOGLE_CUSTOM_SEARCH_API_KEY;

declared dependencies 2

  • @types/node@^22.14.1
  • typescript@^5.8.0