Skills/Docker MCP Catalog/amazon-bedrock-agentcore

amazon-bedrock-agentcore@0.2.1

CAUTION

Publisher claims: "Documentation on AgentCore platform services." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathstests/browser/test_unit_interaction.py:219 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actiontests/code_interpreter/test_files.py:423 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:32 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)tests/gateway/test_unit_targets.py:48 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)tests/gateway/test_unit_targets.py:162 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

File type combined with upload actiontests/code_interpreter/test_files.py:262 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathstests/test_url_validator.py:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandCHANGELOG.md:17 · Process kill command — agent can terminate processes

AST05