proton-mail-mcp

Risky

Score 54 / 100 · 80 files read · 0 critical, 1 high, 5 medium, 0 low findings

Report a55004d13032a45d · first scanned 2026-10-28 · scanned 3× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials78

exfiltration92

execution92

injection76

obfuscation100

files100

100 is clean. Deductions come only from the cited findings below.

highTouches the GPG keyring (~/.gnupg) in a file that also opens network connections

docs/deployment-http-docker.md · line 114 · rule H1

-data` (`/home/node/.gnupg`) para el servicio `agent`. ```bash # En el host / .env del compose: PROTON_PASS_ENABLED=true PROTON_P

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions

(package) · line 1 · rule M3

static.modelcontextprotocol.io

mediumInstructions involve running commands with sudo

docs/bridge-core.md · line 27 · rule M6

os oficiales extra) sudo pacman -S protonmail-bridge-core ``` No instales **a la vez** el paquete GUI de AUR (`proton-mail-bin`)

mediumInstructions involve running commands with sudo

docs/human-quickstart.md · line 7 · rule M6

. En Ubuntu 26.04: `sudo apt install nodejs npm`. - Una cuenta **Proton Mail**. - **Proton Mail Bridge** headless instalado (`prot

mediumRuns a command automatically at install time (prepare)

package.json · line 1 · rule M4

prepare: husky

mediumInstructions involve running commands with sudo

README.md · line 195 · rule M6

Drive CLI ```bash sudo wget -q 'https://proton.me/download/drive/cli/linux/proton-drive' \ -O /usr/local/bin/proton-drive && s

Network endpoints: adr.github.ioagents.mdalexendros.meapi.scorecard.devdocs.npmjs.comdocs.renovatebot.comgithub.comhooks.example.comhooks.tu-servidor.comimg.shields.iokeepachangelog.comntfy.shproton.merclone.orgscorecard.devsemver.orgstatic.modelcontextprotocol.iotu-cliente.exampletu-dashboard.exampletu-dominio.examplewww.contributor-covenant.orgwww.conventionalcommits.orgwww.npmjs.com
Environment read: ALERTS_ENABLEDHOMEPROTON_CALENDAR_ENABLEDPROTON_DRIVE_ENABLEDPROTON_MAIL_ENABLEDPROTON_PASS_ENABLEDPROTON_PASS_STORE_DIR
Shell execution: yes — code or scripts can run shell commands
Install hooks: prepare: husky
Credential material: Touches the GPG keyring (~/.gnupg) in a file that also opens network connections

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.