npm JavaScript analyzed 1.5.0

@drawio/mcp

v1.5.0

npm

Official draw.io MCP server for LLMs - Open diagrams in draw.io editor

Drift inferred · capture-to-capture

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v1.5.0 · analyzer v28 · 3d ago

dynamic code execution indirect eval package/src/libavoid-pass.js :49 (0, eval)(src);

code evidence v1.5.0 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 9

fs package/src/index.js :10 import { existsSync, readFileSync, writeFileSync, unlinkSync } from "fs";
fs package/src/pages.js :1 import { readFileSync, writeFileSync, renameSync, unlinkSync } from "fs";
fs package/src/routing-core-cache.js :22 import { mkdirSync, readFileSync, writeFileSync, renameSync, rmSync } from "fs";

net package/src/index.js :119 const res = await fetch(SHAPE_INDEX_URL);
net package/src/routing-core-cache.js :140 var res = await fetch(ROUTING_CDN_URL,