aks@r1

CAUTION

Publisher claims: "Azure Kubernetes Service (AKS) official MCP server" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher azure · joined 0 days agoInstalls 19,221Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsinternal/azcli/login_test.go:403 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsinternal/azcli/login_test.go:241 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsinternal/azcli/login_test.go:408 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languageprompts/azure-cli-tools.md:28 · Authorization escalation language

AST01

HIGH

Authorization escalation languageprompts/azure-fleet-tools.md:82 · Authorization escalation language

AST01

HIGH

Hidden zero-width characters detectedprompts/azure-resource-health.md:2 · Hidden zero-width characters detected — may conceal content

AST07

HIGH

Authorization escalation languageprompts/azure-fleet-tools.md:280 · Authorization escalation language

AST01

HIGH

Authorization escalation languageprompts/azure-fleet-tools.md:108 · Authorization escalation language

AST01

CRITICAL

Destructive file system command detectedinternal/security/validator_test.go:967 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedinternal/security/validator_test.go:814 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsinternal/security/validator_test.go:729 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languageprompts/azure-fleet-tools.md:286 · Authorization escalation language

AST01

CRITICAL

Access to sensitive file pathsinternal/security/validator_test.go:636 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedinternal/security/validator_test.go:878 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedinternal/security/validator_test.go:873 · Destructive file system command detected

AST05

HIGH

Authorization escalation languageCONTRIBUTING.md:271 · Authorization escalation language

AST01

CRITICAL

Access to sensitive file pathsinternal/security/validator_test.go:642 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandREADME.md:707 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Authorization escalation languageprompts/README.md:41 · Authorization escalation language

AST01

HIGH

Authorization escalation languageprompts/azure-cli-tools.md:65 · Authorization escalation language

AST01

HIGH

Authorization escalation languageprompts/azure-fleet-tools.md:181 · Authorization escalation language

AST01

CRITICAL

Destructive file system command detectedinternal/security/validator_test.go:594 · Destructive file system command detected

AST05

HIGH

Authorization escalation languageprompts/azure-monitor-tools.md:95 · Authorization escalation language

AST01

HIGH

File permission modification commandREADME.md:609 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Access to sensitive file pathsinternal/security/validator_test.go:853 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsinternal/security/validator_test.go:728 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languageprompts/azure-cli-tools.md:36 · Authorization escalation language

AST01