Lapras MCP Server

Findings (19)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.8.0: 5 known vulnerabilities

  GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-8r9q-7v3j-jr4g, GHSA-rvq5-wwqv-78pq, GHSA-w48q-cv73-mx4w

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.2.0: 3 known vulnerabilities

  GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fflate@0.8.2: 1 known vulnerability

  GHSA-px8p-9vwx-vf98

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  flatted@3.3.3: 2 known vulnerabilities

  GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  nanoid@3.3.11: 3 known vulnerabilities

  GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  path-to-regexp@8.2.0: 2 known vulnerabilities

  GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  picomatch@4.0.2: 2 known vulnerabilities

  GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  postcss@8.5.3: 4 known vulnerabilities

  GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  rollup@4.39.0: 1 known vulnerability

  GHSA-mw96-cpmx-2vgc

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  source-map-js@1.2.1: 1 known vulnerability

  GHSA-68fv-2mgg-jv7q

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@6.2.5: 14 known vulnerabilities

  GHSA-356w-63v5-8wf4, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-859w-5945-r5v3 +9 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.24.2: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @vitest/mocker@3.1.1: 2 known vulnerabilities

  GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.14.0: 5 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  npm run build

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (12)

• search_jobs

  Search job by keyword, position, and minimum annual salary

• get_job_detail

  Get detailed information about a specific job posting. You can apply for jobs through the URL provided in the response.

• get_experiences

  Get work experiences on LAPRAS(https://lapras.com)

• create_experience

  Create a new work experience on LAPRAS(https://lapras.com). You can check the result at https://lapras.com/cv

• update_experience

  Update a work experience on LAPRAS(https://lapras.com). You can check the result at https://lapras.com/cv

• delete_experience

  Delete a work experience from LAPRAS(https://lapras.com). You can check the result at https://lapras.com/cv

• get_job_summary

  Get job summary（職務要約） on LAPRAS(https://lapras.com)

• update_job_summary

  Update job summary（職務要約） on LAPRAS(https://lapras.com). You can check the result at https://lapras.com/cv

• get_want_to_do

  Get career aspirations（今後のキャリアでやりたいこと） on LAPRAS(https://lapras.com)

• update_want_to_do

  Update career aspirations（今後のキャリアでやりたいこと） on LAPRAS(https://lapras.com). You can check the result at https://lapras.com/cv

• get_tech_skill

  Get current tech skills（経験技術・スキル・資格） on LAPRAS(https://lapras.com)

• update_tech_skill

  Update tech skills（経験技術・スキル・資格） on LAPRAS(https://lapras.com)