Skills/Docker MCP Catalog/aws-documentation

aws-documentation@1.2.3

CAUTION

Publisher claims: "Tools to access AWS documentation, search for content, and get recommendations." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 122KLast detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addresstests/test_server_aws_cn.py:348 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:27 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Outbound HTTP to raw IP addresstests/test_server_utils.py:480 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_util.py:85 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addresstests/test_util.py:85 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresstests/test_server_aws_cn.py:348 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresstests/test_server_utils.py:480 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_server_aws_cn.py:371 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions

AST05

MEDIUM

URL using raw IP addresstests/test_server_aws_cn.py:371 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_util.py:62 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actiontests/resources/lambda_sns_raw.html:2 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresstests/test_util.py:62 · URL using raw IP address — may bypass domain-based filtering

AST07