alfresco@r1

CAUTION

Publisher claims: "A minimal Model Context Protocol (MCP) server for Alfresco providing tools via the Alfresco REST API" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher alfrescolabs · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detecteddocs/DOCKERHUB_README.md:24 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.md:103 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedDockerfile:12 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedREADME.md:122 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathscompose.yaml:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedREADME.md:111 · Destructive file system command detected

AST05

HIGH

Outbound HTTP to raw IP addressmcp.json:5 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:81 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

File permission modification commandDockerfile:46 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)docs/DOCKERHUB_README.md:66 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)Dockerfile:35 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressmcp.json:5 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)Dockerfile:39 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:87 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:49 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04