asher-mcp

The project implements strong security practices including local-first data storage, encryption at rest for sensitive data (using better-sqlite3-multiple-ciphers), runtime encryption key prompting (key not stored on disk), and strict file permissions (chmod 600) for the SQLite database. SQL SELECT queries from MCP hosts are validated to prevent injection and restrict access to allowed tables. The primary remaining risks are inherent to banking scrapers (reliance on israeli-bank-scrapers library, potential for account lockout if scrapers fail, security of the initial credentials.json file, and the user's secure management of their encryption key). No 'eval' or malicious patterns were found.