space-duck@0.10.0
CAUTIONPublisher claims: "Connect and manage your AI agent's identity on the Space Duck network for status, trust tier, connections, activity, sending pecks, and navigation commands." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher askegor · joined 1 days agoInstalls 4,871Last detonated 27 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.1sprocessexited 1:
0.1sprocessscript backend runs setup only
0.2sprocessscript backend runs setup only
Static findings
CRITICAL
Privileged sudo commandscripts/peck_responder.py:749 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Credential pass-through configurationscripts/mcp_server.py:500 · Credential pass-through configuration — agent relays sensitive credentials
AST02CRITICAL
Credential pass-through configurationscripts/_brain_fallback.py:18 · Credential pass-through configuration — agent relays sensitive credentials
AST02HIGH
Instructs the agent to modify its persistent memory or instruction filesCHANGELOG.md:1780 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
File permission modification commandCHANGELOG.md:595 · File permission modification command — agent changes file ownership/permissions
AST05CRITICAL
Privileged sudo commandCHANGELOG.md:749 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Pipe-to-shell patternCHANGELOG.md:1518 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Credential pass-through configurationscripts/mcp_server.py:25 · Credential pass-through configuration — agent relays sensitive credentials
AST02CRITICAL
Access to sensitive file pathsscripts/doctor_fix.py:333 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Pipe-to-shell patternscripts/install_byob.sh:15 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06CRITICAL
Access to sensitive file pathsscripts/doctor_fix.py:337 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Privileged sudo commandscripts/doctor.sh:308 · Privileged sudo command — agent may execute with elevated privileges
AST05CRITICAL
Credential pass-through configurationscripts/mcp_server.py:396 · Credential pass-through configuration — agent relays sensitive credentials
AST02CRITICAL
Privileged sudo commandscripts/reply_with_claude.sh:486 · Privileged sudo command — agent may execute with elevated privileges
AST05HIGH
Python subprocess execution detectedCHANGELOG.md:1451 · Python subprocess execution detected
AST05CRITICAL
Privileged sudo commandscripts/install_byob.sh:168 · Privileged sudo command — agent may execute with elevated privileges
AST05HIGH
Python subprocess execution detectedCHANGELOG.md:1565 · Python subprocess execution detected
AST05CRITICAL
Privileged sudo commandCHANGELOG.md:713 · Privileged sudo command — agent may execute with elevated privileges
AST05HIGH
File permission modification commandSECURITY-MANIFEST.md:31 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandSECURITY-MANIFEST.md:52 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Python subprocess execution detectedSECURITY-MANIFEST.md:45 · Python subprocess execution detected
AST05HIGH
Auto-update or dynamic fetch configurationCHANGELOG.md:514 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Process kill commandCHANGELOG.md:320 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandCHANGELOG.md:281 · Process kill command — agent can terminate processes
AST05HIGH
Auto-update or dynamic fetch configurationCHANGELOG.md:497 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Auto-update or dynamic fetch configurationCHANGELOG.md:210 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Process kill commandCHANGELOG.md:518 · Process kill command — agent can terminate processes
AST05HIGH
Auto-update or dynamic fetch configurationCHANGELOG.md:502 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
File permission modification commandCHANGELOG.md:1303 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandCHANGELOG.md:415 · Process kill command — agent can terminate processes
AST05HIGH
File permission modification commandCHANGELOG.md:643 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandCHANGELOG.md:498 · Process kill command — agent can terminate processes
AST05HIGH
File permission modification commandSECURITY-MANIFEST.md:69 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
npx invocation of non-well-known packagereferences/MCP-CLIENT-SPEC.md:66 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
File permission modification commandscripts/chat.py:10 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Outbound HTTP to raw IP addressscripts/_brain_fallback.py:213 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
File permission modification commandscripts/README.md:151 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandSECURITY-MANIFEST.md:104 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Tunneling service URLscripts/WORKSPACE_BRIDGE_README.md:80 · Tunneling service URL — may route traffic to attacker infrastructure
AST07HIGH
Outbound HTTP to raw IP addressscripts/WORKSPACE_BRIDGE_README.md:117 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
File permission modification commandSKILL.md:153 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Auto-update or dynamic fetch configurationSKILL.md:110 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
File permission modification commandscripts/_grant_meta.py:169 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Outbound HTTP to raw IP addressscripts/_brain_fallback.py:22 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
File permission modification commandscripts/doctor.sh:150 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandSKILL.md:77 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Outbound HTTP to raw IP addressscripts/_brain_fallback.py:212 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addressSKILL.md:884 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
File permission modification commandSKILL.md:254 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandscripts/_eyesoff.py:12 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandSKILL.md:947 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandscripts/_envelope.py:23 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandscripts/_version_nudge.py:152 · Process kill command — agent can terminate processes
AST05HIGH
File permission modification commandSKILL.md:12 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandscripts/README.md:130 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
npx invocation of non-well-known packagereferences/MCP-CLIENT-SPEC.md:68 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Outbound HTTP to raw IP addressscripts/_brain_fallback.py:113 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
npx invocation of non-well-known packagereferences/MCP-CLIENT-SPEC.md:63 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
File permission modification commandSECURITY-MANIFEST.md:91 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Tunneling service URLscripts/WORKSPACE_BRIDGE_README.md:85 · Tunneling service URL — may route traffic to attacker infrastructure
AST07HIGH
npx invocation of non-well-known packagereferences/MCP-CLIENT-SPEC.md:67 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Process kill commandscripts/README.md:57 · Process kill command — agent can terminate processes
AST05HIGH
npx invocation of non-well-known packagereferences/MCP-CLIENT-SPEC.md:64 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
File permission modification commandscripts/install_byob.sh:152 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandscripts/heal.sh:64 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/heal.sh:59 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/doctor.sh:67 · Process kill command — agent can terminate processes
AST05HIGH
Python subprocess execution detectedscripts/doctor_fix.py:345 · Python subprocess execution detected
AST05HIGH
File permission modification commandscripts/flock_task.py:10 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Python subprocess execution detectedscripts/install_service.py:209 · Python subprocess execution detected
AST05HIGH
Process kill commandscripts/heal.sh:66 · Process kill command — agent can terminate processes
AST05HIGH
Outbound HTTP to raw IP addressscripts/doctor_fix.py:322 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
File permission modification commandscripts/doctor.sh:308 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Python subprocess execution detectedscripts/doctor_fix.py:106 · Python subprocess execution detected
AST05HIGH
Process kill commandscripts/doctor.sh:65 · Process kill command — agent can terminate processes
AST05HIGH
Python subprocess execution detectedscripts/doctor_fix.py:191 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/install_service.py:207 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/doctor_fix.py:107 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addressscripts/doctor_fix.py:271 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Process kill commandscripts/doctor.sh:60 · Process kill command — agent can terminate processes
AST05HIGH
Python subprocess execution detectedscripts/mcp_server.py:552 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/install_service.py:218 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/mcp_client.py:304 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/mcp_server.py:598 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/mcp_server.py:584 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/install_service.py:214 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/install_service.py:220 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/mcp_server.py:585 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_responder.py:597 · Python subprocess execution detected
AST05HIGH
Telegram Bot API URLscripts/peck_listener.py:319 · Telegram Bot API URL — data will be sent to Telegram
AST07HIGH
Outbound HTTP to raw IP addressscripts/mcp_server.py:502 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Telegram Bot API URLscripts/peck_responder.py:285 · Telegram Bot API URL — data will be sent to Telegram
AST07HIGH
Python subprocess execution detectedscripts/peck_listener.py:583 · Python subprocess execution detected
AST05HIGH
Process kill commandscripts/openclaw_brain.sh:11 · Process kill command — agent can terminate processes
AST05HIGH
Outbound HTTP to raw IP addressscripts/mcp_server.py:519 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedscripts/pair.py:636 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_responder.py:834 · Python subprocess execution detected
AST05HIGH
Discord webhook URLscripts/peck_listener.py:38 · Discord webhook URL — data will be sent to Discord
AST07HIGH
Python subprocess execution detectedscripts/mcp_server.py:605 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_listener.py:291 · Python subprocess execution detected
AST05HIGH
Auto-update or dynamic fetch configurationscripts/pair.py:390 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Python subprocess execution detectedscripts/peck_critic.py:113 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_listener.py:298 · Python subprocess execution detected
AST05HIGH
Instructs the agent to modify its persistent memory or instruction filesscripts/peck_responder.py:671 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
Process kill commandscripts/peck_listener.py:1106 · Process kill command — agent can terminate processes
AST05HIGH
Auto-update or dynamic fetch configurationscripts/pair.py:427 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Auto-update or dynamic fetch configurationscripts/pair.py:375 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Python subprocess execution detectedscripts/pair.py:582 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_listener.py:825 · Python subprocess execution detected
AST05HIGH
File permission modification commandscripts/peck_responder.py:23 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Python subprocess execution detectedscripts/peck_responder.py:581 · Python subprocess execution detected
AST05HIGH
Slack webhook URLscripts/peck_listener.py:35 · Slack webhook URL — data will be sent to Slack
AST07HIGH
Python subprocess execution detectedscripts/peck_responder.py:1063 · Python subprocess execution detected
AST05HIGH
Auto-update or dynamic fetch configurationscripts/peck_listener.py:784 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06HIGH
Python subprocess execution detectedscripts/peck_listener.py:286 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/peck_responder.py:793 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/reply_with_claude.sh:515 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedscripts/pulse.py:68 · Python subprocess execution detected
AST05HIGH
Process kill commandscripts/setup_byob_bridge.sh:149 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/teardown_byob_bridge.sh:25 · Process kill command — agent can terminate processes
AST05HIGH
File permission modification commandscripts/setup_listeners_supervised.sh:299 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandscripts/teardown_byob_bridge.sh:30 · Process kill command — agent can terminate processes
AST05HIGH
Python subprocess execution detectedscripts/telegram_listener.py:1092 · Python subprocess execution detected
AST05HIGH
File permission modification commandscripts/sign_key.py:265 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Process kill commandscripts/setup_listeners_supervised.sh:68 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/setup_listeners_supervised.sh:98 · Process kill command — agent can terminate processes
AST05HIGH
Outbound HTTP to raw IP addressscripts/setup_byob_bridge.sh:181 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedscripts/pulse.py:80 · Python subprocess execution detected
AST05HIGH
Tunneling service URLscripts/setup_byob_bridge.sh:189 · Tunneling service URL — may route traffic to attacker infrastructure
AST07HIGH
File permission modification commandscripts/permissions.py:10 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandscripts/send_peck.py:8 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Python subprocess execution detectedscripts/rail_test.py:94 · Python subprocess execution detected
AST05HIGH
File permission modification commandscripts/setup_byob_bridge.sh:235 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Telegram Bot API URLscripts/telegram_poll.py:49 · Telegram Bot API URL — data will be sent to Telegram
AST07HIGH
Instructs the agent to modify its persistent memory or instruction filesscripts/reply_with_claude.sh:391 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
Process kill commandscripts/setup_listeners_supervised.sh:187 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/setup_listeners_supervised.sh:66 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/setup_byob_bridge.sh:150 · Process kill command — agent can terminate processes
AST05HIGH
Python subprocess execution detectedscripts/telegram_listener.py:481 · Python subprocess execution detected
AST05HIGH
File permission modification commandscripts/setup_listeners_supervised.sh:172 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
File permission modification commandscripts/setup_byob_bridge.sh:29 · File permission modification command — agent changes file ownership/permissions
AST05HIGH
Outbound HTTP to raw IP addressscripts/telegram_poll.py:65 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedscripts/reply_with_claude.sh:411 · Python subprocess execution detected
AST05HIGH
Instructs the agent to modify its persistent memory or instruction filesscripts/telegram_listener.py:904 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
Python subprocess execution detectedscripts/pulse.py:57 · Python subprocess execution detected
AST05HIGH
Process kill commandscripts/setup_listeners_supervised.sh:59 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/teardown_byob_bridge.sh:32 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/teardown_byob_bridge.sh:39 · Process kill command — agent can terminate processes
AST05HIGH
Instructs the agent to modify its persistent memory or instruction filesscripts/setup_byob_bridge.sh:5 · Instructs the agent to modify its persistent memory or instruction files
AST01HIGH
File permission modification commandscripts/sign_key.py:15 · File permission modification command — agent changes file ownership/permissions
AST05MEDIUM
Remote installer piped to shellCHANGELOG.md:1518 · Remote installer piped to shell
AST07MEDIUM
URL using raw IP addressscripts/setup_byob_bridge.sh:181 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/doctor_fix.py:271 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Outbound HTTP to raw IP addressscripts/test_workspace_bridge_e2e.py:184 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressscripts/_brain_fallback.py:113 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/mcp_server.py:502 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
Remote installer piped to shellscripts/install_byob.sh:15 · Remote installer piped to shell
AST07MEDIUM
File type combined with upload actionSECURITY-MANIFEST.md:69 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
URL using raw IP addressscripts/WORKSPACE_BRIDGE_README.md:117 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Python subprocess execution detectedscripts/workspace_bridge.py:955 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addressscripts/test_workspace_bridge_e2e.py:70 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addressscripts/_brain_fallback.py:22 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/_brain_fallback.py:213 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Telegram Bot API URLscripts/tg_send.py:174 · Telegram Bot API URL — data will be sent to Telegram
AST07MEDIUM
URL using raw IP addressscripts/telegram_poll.py:65 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/mcp_server.py:519 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
File type combined with upload actionSECURITY-MANIFEST.md:60 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionscripts/peck_listener.py:725 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
URL using raw IP addressSKILL.md:884 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
File type combined with upload actionCHANGELOG.md:373 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
Telegram Bot API URLscripts/tg_send.py:296 · Telegram Bot API URL — data will be sent to Telegram
AST07HIGH
Outbound HTTP to raw IP addressscripts/test_mcp_client_local.py:93 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
File type combined with upload actionscripts/pair.py:874 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
Telegram Bot API URLscripts/tg_send.py:23 · Telegram Bot API URL — data will be sent to Telegram
AST07HIGH
Outbound HTTP to raw IP addressscripts/test_workspace_bridge_e2e.py:166 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
File type combined with upload actionSKILL.md:424 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
URL using raw IP addressscripts/_brain_fallback.py:212 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/doctor_fix.py:322 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Process kill commandscripts/update.sh:254 · Process kill command — agent can terminate processes
AST05HIGH
Process kill commandscripts/tg_send.py:288 · Process kill command — agent can terminate processes
AST05MEDIUM
File type combined with upload actionscripts/peck_listener.py:749 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionCHANGELOG.md:1538 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionscripts/rail_test.py:22 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
Outbound HTTP to raw IP addressscripts/test_mcp_server_local.py:119 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedscripts/test_mcp_client_local.py:52 · Python subprocess execution detected
AST05MEDIUM
URL using raw IP addressscripts/test_workspace_bridge_e2e.py:70 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/test_mcp_client_local.py:93 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/test_workspace_bridge_e2e.py:166 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/test_workspace_bridge_e2e.py:184 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addressscripts/test_mcp_server_local.py:119 · URL using raw IP address — may bypass domain-based filtering
AST07