arm-mcp@0.5.3

CAUTION

Publisher claims: "Provides AI assistants with specialized tools for Arm architecture development, migration, optimization, and profiling. Includes knowledge base search, code migration analysis, container architecture inspection, Arm Performix workload profiling, and assembly performance analysis." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher arm · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedCONTRIBUTING.md:165 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedmcp-local/Dockerfile:40 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedmcp-local/Dockerfile:55 · Destructive file system command detected

AST05

CRITICAL

Privileged sudo command.github/workflows/trusted-mcp-release.yml:269 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Destructive file system command detectedmcp-local/Dockerfile:107 · Destructive file system command detected

AST05

CRITICAL

Privileged sudo command.github/workflows/check-disk-space.yml:26 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Destructive file system command detectedmcp-local/Dockerfile:39 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedmcp-local/Dockerfile:64 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedCONTRIBUTING.md:150 · Destructive file system command detected

AST05

CRITICAL

Privileged sudo command.github/workflows/trusted-mcp-release.yml:268 · Privileged sudo command — agent may execute with elevated privileges

AST05

HIGH

Python subprocess execution detectedmcp-local/scripts/validate-runtime-egress.py:172 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/tests/test_build_inputs.py:680 · Python subprocess execution detected

AST05

HIGH

URL with embedded credentialsevals/benchmark.json:2888 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

File permission modification commandmcp-local/Dockerfile:73 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

URL with embedded credentialsevals/benchmark.json:2726 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Python subprocess execution detectedmcp-local/scripts/stage-build-inputs.py:129 · Python subprocess execution detected

AST05

HIGH

File permission modification commandmcp-local/scripts/stage-build-inputs.py:227 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detectedmcp-local/tests/test_build_inputs.py:292 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/scripts/stage-build-inputs.py:85 · Python subprocess execution detected

AST05

HIGH

URL with embedded credentialsevals/benchmark.json:2717 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

npx invocation of non-well-known packageagent-integrations/codex/arm-enablement/SKILL.md:102 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Python subprocess execution detectedmcp-local/scripts/validate-runtime-egress.py:159 · Python subprocess execution detected

AST05

HIGH

URL with embedded credentialsevals/benchmark.json:2735 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Python subprocess execution detectedmcp-local/scripts/stage-build-inputs.py:229 · Python subprocess execution detected

AST05

CRITICAL

Destructive file system command detectedmcp-local/scripts/stage-build-inputs.py:226 · Destructive file system command detected

AST05

HIGH

URL with embedded credentialsevals/benchmark.json:2708 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Python subprocess execution detected.github/scripts/check_kb_search_version.py:66 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/utils/migrate_ease_utils.py:226 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/tests/test_build_inputs.py:696 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/tests/test_build_inputs.py:681 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/utils/cli_utils.py:46 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedmcp-local/tests/test_build_inputs.py:682 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionagent-integrations/codex/arm-migration.md:15 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionagent-integrations/kiro/arm-migration.md:16 · File type combined with upload action — agent may exfiltrate local data files

AST07