Skills/Docker MCP Catalog/aws-iot-sitewise

aws-iot-sitewise@11.0.23

CAUTION

Publisher claims: "Industrial IoT asset management." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 0Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
Remote installer piped to shellREADME.md:95 · Remote installer piped to shell
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:84 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)DEVELOPMENT.md:379 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Access to sensitive file pathstests/test_validation.py:393 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detectedtests/test_validation.py:390 · Destructive file system command detected
AST05
CRITICAL
Pipe-to-shell patternREADME.md:95 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)awslabs/aws_iot_sitewise_mcp_server/server.py:22 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_asset_models.py:148 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_asset_models.py:45 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)awslabs/aws_iot_sitewise_mcp_server/server.py:43 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_asset_models.py:20 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_asset_models.py:85 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_assets.py:118 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)awslabs/aws_iot_sitewise_mcp_server/server.py:52 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_assets.py:85 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_assets.py:45 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_assets.py:20 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_asset_models.py:124 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/tools/test_sitewise_assets.py:153 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04