arcade-mcp-server

v1.22.2 suspicious
5.0
Medium Risk

Model Context Protocol (MCP) server framework for Arcade.dev

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some potential risks, particularly concerning shell execution and a lack of associated repositories or credentials. While not definitively malicious, these factors warrant caution.

  • High shell risk due to subprocess execution
  • Lack of associated GitHub repository and limited maintainer activity
Per-check LLM notes
  • Network: The network call is likely for legitimate HTTP requests, possibly for authentication or API interactions.
  • Shell: Executing subprocess with sys.argv may indicate the package is designed to run scripts or execute commands, but it could also be exploited for remote code execution.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The maintainer has only one package and no associated GitHub repository, which may indicate a less experienced or potentially suspicious actor.

📦 Package Quality Overall: Low (3.2/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (3019 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 373 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • l self._http_client = httpx.AsyncClient(timeout=10.0) self._jwks_cache: dict[str, Any] | Non
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

  • oup=True) return subprocess.Popen( [sys.executable, *sys.argv],
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Arcade.dev" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with arcade-mcp-server 
Your task is to develop a real-time collaborative drawing application using the 'arcade-mcp-server' package. This application will allow multiple users to draw on a canvas simultaneously, and all changes made by one user will be instantly reflected on other users' screens. Here’s a detailed breakdown of what your application should achieve and how you can utilize the 'arcade-mcp-server' package to make it happen:

1. **Setup Environment**: Start by setting up your development environment with Python installed and the 'arcade-mcp-server' package. Ensure you have the necessary dependencies for web development and real-time communication.
2. **Server Setup**: Use the 'arcade-mcp-server' to create a server that can handle multiple clients connecting to it. This server will act as the backbone for real-time communication between the users.
3. **Canvas Creation**: Develop a simple HTML/CSS frontend that includes a canvas element where users can draw. Integrate JavaScript to handle drawing functionality locally before sending data to the server.
4. **Real-Time Drawing**: Implement logic within the server to receive drawing actions from clients (e.g., start/end of lines, colors used). Utilize the 'arcade-mcp-server' capabilities to broadcast these actions to all connected clients, ensuring that any drawing action is reflected across all clients in real-time.
5. **User Authentication**: Optionally, implement a basic authentication system so users can log in and save their drawings under their profiles. This can be done through session management techniques available in Python web frameworks.
6. **Drawing History**: Allow users to undo their last drawing action and implement a feature to save and load previous drawings. This requires storing drawing history on the server and providing UI elements for navigation through this history.
7. **Customization Options**: Add customization options such as different brush sizes, colors, and shapes. Users should be able to select these options which will then be sent to the server and applied across all clients.
8. **Testing & Debugging**: Thoroughly test your application to ensure smooth real-time collaboration. Pay special attention to network latency issues and server-client synchronization problems.
9. **Documentation**: Write clear documentation on how to set up the server, client-side code, and how to contribute to the project.

This project will not only demonstrate your ability to work with the 'arcade-mcp-server' but also showcase your skills in real-time web applications, front-end development, and backend logic handling.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!