Skills/Docker MCP Catalog/aws-kb-retrieval-server

aws-kb-retrieval-server@0.6.2

CAUTION

Publisher claims: "An MCP server implementation for retrieving information from the AWS Knowledge Base using the Bedrock Agent Runtime." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher modelcontextprotocol · joined 0 days agoInstalls 22,727Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsscripts/gate-lease.mjs:626 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/gate-lease.test.mjs:420 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/interface-diff.mjs:221 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/gate-lease.mjs:332 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/gate-lease.test.mjs:689 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/gate-lease.mjs:640 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/gate-lease.mjs:145 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/interface-diff.mjs:256 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/pack-and-verify.mjs:256 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/sdk-watch.mjs:547 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.mjs:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.mjs:96 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/sdk-watch.mjs:542 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known package.claude/skills/client-smoke/SKILL.md:38 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill command.claude/skills/client-smoke/SKILL.md:141 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.mjs:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.mjs:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known package.claude/skills/client-smoke/SKILL.md:29 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsscripts/skill-eval.mjs:97 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detectedsrc/git/Dockerfile:26 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathsscripts/smoke-servers.mjs:462 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/smoke-servers.mjs:383 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/verify-dco.test.mjs:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/smoke-servers.mjs:387 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/memory/index.ts:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill command.claude/skills/client-smoke/SKILL.md:138 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.test.mjs:951 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/skill-eval.test.mjs:436 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/memory/index.ts:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscripts/smoke-servers.mjs:431 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Process kill commandscripts/skill-eval.mjs:612 · Process kill command — agent can terminate processes
AST05
HIGH
Outbound HTTP to raw IP addressscripts/smoke-servers.mjs:475 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known package.claude/skills/local-dev/SKILL.md:88 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Instructs the agent to modify its persistent memory or instruction files.claude/skills/issue-triage/SKILL.md:45 · Instructs the agent to modify its persistent memory or instruction files
AST01
HIGH
npx invocation of non-well-known packagescripts/lib/tsc-program.mjs:197 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/everything/README.md:61 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/everything/README.md:75 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known package.claude/skills/client-smoke/SKILL.md:204 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:62 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagescripts/lib/claude-cli.mjs:16 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandscripts/gate-lease.test.mjs:658 · Process kill command — agent can terminate processes
AST05
HIGH
Outbound HTTP to raw IP addressscripts/smoke-servers.mjs:520 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
File permission modification commandsrc/everything/package.json:25 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
npx invocation of non-well-known package.claude/skills/client-smoke/SKILL.md:205 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known package.claude/skills/client-smoke/SKILL.md:97 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandscripts/skill-eval.mjs:607 · Process kill command — agent can terminate processes
AST05
HIGH
File permission modification commandsrc/memory/index.ts:500 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
File permission modification commandsrc/filesystem/package.json:25 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
npx invocation of non-well-known packagesrc/sequentialthinking/README.md:83 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/sequentialthinking/README.md:155 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/memory/README.md:271 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/sequentialthinking/README.md:141 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/filesystem/README.md:336 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/sequentialthinking/README.md:211 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/filesystem/README.md:299 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/memory/README.md:201 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/memory/README.md:257 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification commandsrc/memory/package.json:25 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
npx invocation of non-well-known packagesrc/memory/README.md:168 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/filesystem/README.md:257 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressscripts/smoke-servers.mjs:520 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionscripts/verify-dco.mjs:235 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
MCP server using network transport (SSE/HTTP).claude/skills/release/SKILL.md:639 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
File permission modification commandsrc/sequentialthinking/package.json:25 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)src/git/README.md:188 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:42 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
LOW
Unpinned dependencysrc/everything/README.md:128 · Unpinned dependency
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)src/fetch/README.md:124 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)src/time/README.md:147 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addressscripts/smoke-servers.mjs:475 · URL using raw IP address — may bypass domain-based filtering
AST07