MCP WordPress Remote proxy server
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.4.0 · analyzer v33 · 4w ago
danger signals2
- dynamic code execution new Function() package/dist/lib.js :6770
var deprecatedfn = new Function( - dynamic code execution new Function() package/dist/proxy.js :2952
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4
filesystem 2
- fs package/dist/lib.js :4846
import { statSync, createReadStream, promises as fs3 } from "node:fs"; - fs package/dist/proxy.js :11709
import { statSync, createReadStream, promises as fs3 } from "node:fs";
network 2
- net package/dist/lib.js :5534
import http from "node:http"; - net package/dist/proxy.js :12397
import http from "node:http";
declared dependencies 26
- @modelcontextprotocol/sdk@^1.8.0
- @tootallnate/quickjs-emscripten@^0.23.0
- eventsource-parser@^3.0.1
- express@^4.18.2
- https-proxy-agent@^7.0.6
- node-fetch@^3.3.2
- open@^10.0.0
- pac-resolver@^7.0.1
- socks-proxy-agent@^8.0.5
- @playwright/test@^1.54.2
- @types/express@^4.17.21
- @types/jest@^29.5.12
show 14 more
- @types/mockdate@^2.0.0
- @types/node@^18.19.0
- @types/supertest@^6.0.3
- @types/tmp@^0.2.6
- jest@^29.7.0
- mockdate@^3.0.5
- nock@^14.0.9
- playwright@^1.54.2
- prettier@^3.2.5
- supertest@^7.1.4
- tmp@^0.2.5
- ts-jest@^29.1.2
- tsup@^8.0.2
- typescript@^5.3.3