Blocked · updated every crawl
18 skills and MCP servers failed the honeypot.
Blocked means the sandbox saw it do something that no reason explains: send a planted credential off the machine, read credential files and phone home, or carry instructions aimed at the agent rather than the user. Each row links to the full trace. 148,559 installs across them.
| Package | What the sandbox saw | Score | Installs | Verdict |
|---|---|---|---|---|
| guardvibe@3.69.0 goklab · npm · MCP server | no network, touches nothing outside the project, writes no memory. | 45 | 6,751 | 9 h ago |
| groundhog-mcp@0.22.0 dmytrome · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 1,142 | 11 h ago |
| godot-mcp-docs@1.0.1 matthew-scott · PyPI · MCP server | calls github.com only, touches nothing outside the project, writes no memory. | 29 | 26 | 17 h ago |
| elytra-mcp@0.4.0a2 elytra-labs · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 0 | 2 days ago |
| video-downloader-by-browser@1.3.0 sedey999 · ClawHub | reads credential files. | 34 | 510 | 3 days ago |
| db-conn-mcp@0.7.1 idle-sync · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 371 | 3 days ago |
| command-center@1.5.0 jontsai · ClawHub | reads credential files. | 29 | 13,904 | 4 days ago |
| cloakbrowsermcp@2.0.4 overtimepog · PyPI · MCP server | calls github.com only, touches nothing outside the project, writes no memory. | 34 | 212 | 4 days ago |
| cli-bridge-mcp@0.3.1 joaoberne · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 388 | 4 days ago |
| cisco-ai-mcp-scanner@4.8.7 cisco-ai-defense · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 113,359 | 4 days ago |
| package@1.0.0 xuzhonglin12138 · ClawHub | sends data to log.rainbond.com. | 38 | 27 | 4 days ago |
| kin@0.8.7 kinlab · npm · MCP server | reads credential files. | 37 | 0 | 5 days ago |
| epsimo-agent@0.3.0 thierryteisseire · npm | calls github.com only, touches nothing outside the project, writes no memory. | 34 | 58 | 5 days ago |
| multi-repo-dev@1.1.2 yonsun-w · npm | calls github.com only, touches nothing outside the project, writes no memory. | 47 | 17 | 5 days ago |
| zscaler-mcp-server@0.15.4 zscaler · Docker MCP Catalog · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 7,478 | 6 days ago |
| simplechecklist@1.0.0 devmayur · Docker MCP Catalog · MCP server | reads credential files. | 42 | 0 | 6 days ago |
| agentguard-mcp@0.2.0 zgemini22 · PyPI · MCP server | no network, touches nothing outside the project, writes no memory. | 48 | 152 | 6 days ago |
| siluzan-tso@1.1.57 sigedev01-bit · ClawHub | reads credential files. | 31 | 4,164 | 7 days ago |
A Blocked verdict describes behavior observed in an isolated sandbox at the version shown. Publishers can dispute any verdict from its page; disputes are reviewed and the outcome is published. Feed: https://killerskills.ai/blocked.xml