Skills/Docker MCP Catalog/aws-bedrock-custom-model-import

aws-bedrock-custom-model-import@0.0.23

CAUTION

Publisher claims: "Manage custom models in Bedrock." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 0Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only

Static findings

HIGH
References a credential file in the home directoryREADME.md:130 · References a credential file in the home directory
AST03
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:38 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions
AST05
CRITICAL
Access to sensitive file pathsREADME.md:130 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Credential pass-through configurationREADME.md:367 · Credential pass-through configuration — agent relays sensitive credentials
AST02