arxiv-mcp-server@0.2.11
CAUTIONPublisher claims: "|" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry Docker MCP CatalogPublisher jasonleinart · joined 0 days agoInstalls 112KLast detonated 1 h ago
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.3sprocessdependency install exit 1
0.4sprocessexec /usr/bin/timeout
0.4sprocessexec .venv/bin/arxiv-mcp-server
0.4sprocessexited 127: timeout: failed to run command '.venv/bin/arxiv-mcp-server': No such file or directory
0.4sclaimedno tools/list reply (exit 127)
0.4sprocessscript backend runs setup only
Static findings
CRITICAL
Pipe-to-shell pattern.github/workflows/tests.yml:30 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06HIGH
Python subprocess execution detectedfinal_integration_test.py:227 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedfinal_integration_test.py:91 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedtest_async_workflow.py:38 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedfinal_integration_test.py:94 · Python subprocess execution detected
AST05CRITICAL
Destructive file system command detectedREADME.md:71 · Destructive file system command detected
AST05CRITICAL
Destructive file system command detectedREADME.md:124 · Destructive file system command detected
AST05CRITICAL
Destructive file system command detectedREADME.md:134 · Destructive file system command detected
AST05CRITICAL
Destructive file system command detectedREADME.md:87 · Destructive file system command detected
AST05HIGH
Python subprocess execution detectedtest_mcp_protocol.py:197 · Python subprocess execution detected
AST05MEDIUM
MCP server using network transport (SSE/HTTP)README.md:496 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04MEDIUM
MCP server using network transport (SSE/HTTP)README.md:53 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04HIGH
Python subprocess execution detectedtest_async_workflow.py:42 · Python subprocess execution detected
AST05MEDIUM
MCP server using network transport (SSE/HTTP)SKILL.md:5 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04MEDIUM
Remote installer piped to shell.github/workflows/tests.yml:30 · Remote installer piped to shell
AST07HIGH
Python subprocess execution detectedtest_mcp_protocol.py:65 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedtest_docker_mcp.py:28 · Python subprocess execution detected
AST05