Skills/Docker MCP Catalog/astra-db

astra-db@1.3.4

CAUTION

Publisher claims: "Configure the connection to Astra DB" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher datastax · joined 0 days agoInstalls 19,542Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsindex.ts:803 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detectedtests/tools/OpenBrowser.test.ts:72 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathstests/setup.ts:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsindex.ts:804 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/tools/OpenBrowser.test.ts:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/setup.ts:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/util/errors.test.ts:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsutil/errors.ts:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsutil/db.ts:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:160 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:157 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathstests/util/errors.test.ts:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsutil/db.ts:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
LOW
Unpinned dependency.github/workflows/tag-release.yml:46 · Unpinned dependency
AST06
CRITICAL
Access to sensitive file pathstests/util/errors.test.ts:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsutil/db.ts:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:86 · npx invocation of non-well-known package — may execute untrusted code
AST06
LOW
Unpinned dependency.github/workflows/ci.yml:27 · Unpinned dependency
AST06
CRITICAL
Access to sensitive file pathsutil/errors.ts:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05