Cn Scraper MCP Server

This MCP server implements a web scraper for Chinese platforms with reasonable security practices for handling cookies and authentication. The codebase properly separates credentials from logs, uses environment variables for sensitive configuration, and implements input validation. However, several moderate concerns exist: the server exposes powerful web scraping capabilities with minimal permission controls, relies on local file storage for sensitive cookies without encryption, performs extensive HTTP requests to multiple platforms that could theoretically be exploited for exfiltration, and lacks rate limiting enforcement. For a scraper's intended purpose, these issues are somewhat expected and manageable, but users should be aware of the data access scope. Supply chain analysis found 4 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.