@mayhemx87/mcpscan 0.4.0 → 0.5.0

package/README.md

@@ -91,7 +91,7 @@ the exact line of the offending server definition.
 # .pre-commit-config.yaml
 repos:
   - repo: https://github.com/mayhemx87/mcpscan
-    rev: v0.4.0
+    rev: v0.5.0
     hooks:
       - id: mcpscan
 ```
@@ -119,6 +119,7 @@ Dedicated MCP config files and editor settings files that embed MCP servers:
 | `.claude/settings.json`, `.claude/settings.local.json` | Claude Code |
 | `.gemini/settings.json` | Gemini CLI |
 | `.zed/settings.json` (`context_servers`) | Zed |
+| `.junie/mcp/mcp.json` | Junie |
 
 Both `mcpServers` and VS Code's `servers` keys are understood, as is Zed's
 `context_servers` key; `command` and `args` are analyzed together, including

package/dist/engine.js

@@ -53,6 +53,8 @@ function looksLikeLiteralSecret(value) {
         return false;
     return SECRET_VALUE_PATTERNS.some(p => p.test(value));
 }
+const REPO_ESCAPE_PATH = /^(?:\/|[A-Za-z]:[\\/]|\\\\|\.\.[\\/])/;
+const PATH_TRAVERSAL_IN_LINE = /(?:^|[\s;|&])\.\.[\\/]/;
 /**
  * Returns true if the command line contains npx/uvx/pipx with an unversioned
  * package (handles compound commands like cmd1 && npx pkg). Runner flags
@@ -216,10 +218,8 @@ export function analyzeConfig(filePath, content, isGitTracked) {
             }
         }
         // MCP-004: absolute path or path traversal outside repo
-        const cmd = command;
-        if (cmd.startsWith('/') ||
-            args.some(a => a.startsWith('/')) ||
-            /(?:^|[\s;|&])\.\.\//.test(line)) {
+        if ([command, ...args].some(value => REPO_ESCAPE_PATH.test(value.trimStart())) ||
+            PATH_TRAVERSAL_IN_LINE.test(line)) {
             serverFindings.push({
                 file: filePath,
                 rule_id: 'MCP-004',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mayhemx87/mcpscan",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "Static scanner for malicious MCP config files in AI-integrated editor repos",
   "type": "module",
   "bin": {