Skills/Docker MCP Catalog/atlassian

atlassian@r1

CAUTION

Publisher claims: "Tools for Atlassian products (Confluence and Jira). This integration supports both Atlassian Cloud and Jira Server/Data Center deployments." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher sooperset · joined 0 days agoInstalls 170KLast detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.2sprocessdependency install exit 1
0.3sprocessexec /usr/bin/timeout
0.3sprocessexec .venv/bin/mcp-atlassian
0.3sprocessexited 127: timeout: failed to run command '.venv/bin/mcp-atlassian': No such file or directory
0.3sclaimedno tools/list reply (exit 127)
0.3sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsscripts/generate_tool_docs.py:710 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:121 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/test_with_real_data.sh:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/confluence/client.py:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/__init__.py:311 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/test_with_real_data.sh:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/__init__.py:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/generate_tool_docs.py:720 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/confluence/config.py:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/oauth_authorize.py:274 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/test_with_real_data.sh:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/test_with_real_data.sh:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/confluence/client.py:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/generate_tool_docs.py:726 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/__init__.py:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/__init__.py:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/generate_tool_docs.py:715 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/test_with_real_data.sh:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Hidden zero-width characters detectedsrc/mcp_atlassian/jira/config.py:33 · Hidden zero-width characters detected — may conceal content
AST07
CRITICAL
Access to sensitive file pathstests/e2e/docker/README.md:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)src/mcp_atlassian/servers/main.py:576 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/http.py:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Zero-width characters (hidden text)src/mcp_atlassian/jira/config.py:33 · Zero-width characters (hidden text)
AST01
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/io.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/servers/jira.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/e2e/docker/README.md:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/jira/config.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/proxy.py:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/jira/client.py:166 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/env.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/servers/jira.py:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/mcp_atlassian/servers/main.py:56 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Credential pass-through configurationtests/integration/README.md:55 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathstests/e2e/docker/README.md:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/jira/client.py:165 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresssrc/mcp_atlassian/servers/main.py:56 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/io.py:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/servers/main.py:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/mcp_atlassian/utils/pagination.py:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05