atlan@r1

CAUTION

Publisher claims: "MCP server for interacting with Atlan services including asset search, updates, and lineage traversal for comprehensive data governance and discovery." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher atlanhq · joined 0 days agoInstalls 12,495Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.2sprocessdependency install exit 1

0.3sprocessexec /usr/bin/timeout

0.3sprocessexec .venv/bin/atlan-mcp-server

0.3sprocessexited 127: timeout: failed to run command '.venv/bin/atlan-mcp-server': No such file or directory

0.3sclaimedno tools/list reply (exit 127)

0.3sprocessscript backend runs setup only

Static findings

MEDIUM

Remote installer piped to shellREADME.md:87 · Remote installer piped to shell

AST07

CRITICAL

Access to sensitive file pathsdocs/LOCAL_BUILD.md:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssettings.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Destructive file system command detectedDockerfile:19 · Destructive file system command detected

AST05

CRITICAL

Access to sensitive file pathsdocs/LOCAL_BUILD.md:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:6 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

CRITICAL

Pipe-to-shell patternREADME.md:87 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathssettings.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05