Skills/Docker MCP Catalog/apollo-mcp-server

apollo-mcp-server@r1

CAUTION

Publisher claims: "Enable graph-based API orchestration with AI" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher apollographql · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedcrates/apollo-mcp-server/src/auth.rs:1046 · Destructive file system command detected

AST05

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-registry/src/platform_api.rs:194 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:349 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:335 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Persistence: instructs the agent to auto-load this skill in future sessions.agents/skills/mcp-apps-sync-docs/SKILL.md:4 · Persistence: instructs the agent to auto-load this skill in future sessions

AST01

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:294 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:294 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:8 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:819 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addresscrates/apollo-mcp-server/src/runtime/endpoint.rs:55 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:839 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:819 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:779 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Process kill commandcrates/apollo-mcp-server/src/server/states.rs:741 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandcrates/apollo-mcp-server/src/server/states.rs:704 · Process kill command — agent can terminate processes

AST05

MEDIUM

URL using raw IP addresscrates/apollo-mcp-registry/src/platform_api.rs:194 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)scripts/nix/install.sh:13 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)crates/apollo-mcp-server/src/runtime.rs:923 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:349 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

File permission modification commandscripts/nix/install.sh:22 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:13 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:779 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresscrates/apollo-mcp-rhai/src/functions/http.rs:335 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Process kill commandcrates/apollo-mcp-server/src/server/states.rs:625 · Process kill command — agent can terminate processes

AST05

MEDIUM

URL using raw IP addresscrates/apollo-mcp-server/src/runtime/telemetry.rs:839 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresscrates/apollo-mcp-server/src/runtime/endpoint.rs:55 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07