scanned 1mo ago·osv · gitleaks · opengrep · picklescan + heuristics·full breakdown in the Security tab ↓
WhatsApp MCP Server
whatsapp-mcp is a Model Context Protocol server that connects your personal WhatsApp account to AI assistants like Claude.
It lets the agent search and read your messages (including images, videos, documents, and audio), search contacts, and send messages and media to individuals or groups. It connects through the WhatsApp Web multidevice API using the whatsmeow library and stores messages locally in SQLite — data is only sent to the LLM when the agent explicitly accesses it via tools.
It is intended for individuals who want an AI assistant that can read and send their WhatsApp messages. As the README notes, like many messaging MCP servers it carries prompt-injection / data-exfiltration risks.
! Security: Review · 7575/100 · grade Bscanned 1mo ago
✓ no compromise signals6 risk-surface · 7/20 OWASP controls flagged
Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.
What this capability can do · high confidence (static)
Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).
OWASP Top 10 for LLM Applications
⚠LLM03Supply Chaincritical
Vulnerable/compromised dependencies, models or archives in the artifact.