awslabs-dynamodb@2.1.8
CAUTIONPublisher claims: "Complete DynamoDB operations and table management." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 0Last detonated 1 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
Static findings
CRITICAL
Access to sensitive file pathstests/test_common.py:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/db_analyzer/test_plugins.py:509 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/repo_generation_tool/unit/test_language_config.py:91 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/repo_generation_tool/unit/test_codegen.py:681 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/db_analyzer/test_analyzer_utils.py:255 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/db_analyzer/test_analyzer_utils.py:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/db_analyzer/test_plugins.py:516 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathsawslabs/dynamodb_mcp_server/server.py:271 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/templates/README.md:49 · npx invocation of non-well-known package — may execute untrusted code
AST06CRITICAL
Destructive file system command detectedtests/test_model_validation_utils.py:587 · Destructive file system command detected
AST05HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_compilation.py:21 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/templates/README.md:22 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/templates/README.md:38 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedawslabs/dynamodb_mcp_server/cdk_generator/generator.py:115 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedawslabs/dynamodb_mcp_server/model_validation_utils.py:777 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/templates/README.md:30 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/templates/README.md:47 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageawslabs/dynamodb_mcp_server/cdk_generator/generator.py:136 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Instructs the agent to modify its persistent memory or instruction filesAGENTS.md:241 · Instructs the agent to modify its persistent memory or instruction files
AST01CRITICAL
Access to sensitive file pathstests/test_common.py:94 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/test_model_validation_utils.py:1533 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/test_common.py:90 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Access to sensitive file pathstests/test_model_validation_utils.py:1573 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Python subprocess execution detectedawslabs/dynamodb_mcp_server/model_validation_utils.py:136 · Python subprocess execution detected
AST05HIGH
File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions
AST05CRITICAL
Access to sensitive file pathstests/test_model_validation_utils.py:1590 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
AWS access key pattern detectedawslabs/dynamodb_mcp_server/model_validation_utils.py:70 · AWS access key pattern detected — possible hardcoded or harvested key
AST03MEDIUM
MCP server using network transport (SSE/HTTP)README.md:54 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04HIGH
npx invocation of non-well-known packagetests/cdk_generator/test_generator.py:229 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Outbound HTTP to raw IP addresstests/test_model_validation_utils.py:973 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedtests/repo_generation_tool/scripts/manage_snapshots.py:294 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packagetests/cdk_generator/test_generator.py:231 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_deployment.py:60 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packagetests/cdk_generator/test_generator.py:228 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedtests/repo_generation_tool/conftest.py:259 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addresstests/test_model_validation_utils.py:959 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
npx invocation of non-well-known packagetests/cdk_generator/integration/test_cdk_deployment.py:197 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_deployment.py:48 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addresstests/test_model_validation_utils.py:1005 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_deployment.py:183 · Python subprocess execution detected
AST05HIGH
Outbound HTTP to raw IP addresstests/test_model_validation_utils.py:1004 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Outbound HTTP to raw IP addresstests/test_model_validation_utils.py:934 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07HIGH
Python subprocess execution detectedtests/repo_generation_tool/scripts/manage_snapshots.py:105 · Python subprocess execution detected
AST05HIGH
AWS access key pattern detectedtests/test_model_validation_utils.py:1512 · AWS access key pattern detected — possible hardcoded or harvested key
AST03HIGH
Python subprocess execution detectedtests/repo_generation_tool/conftest.py:289 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_compilation.py:47 · Python subprocess execution detected
AST05HIGH
Python subprocess execution detectedtests/cdk_generator/integration/test_cdk_compilation.py:61 · Python subprocess execution detected
AST05HIGH
npx invocation of non-well-known packagetests/cdk_generator/integration/test_cdk_compilation.py:82 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
File type combined with upload actiontests/repo_generation_tool/fixtures/valid_schemas/README.md:287 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
URL using raw IP addresstests/test_model_validation_utils.py:1005 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addresstests/test_model_validation_utils.py:1004 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addresstests/test_model_validation_utils.py:973 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addresstests/test_model_validation_utils.py:934 · URL using raw IP address — may bypass domain-based filtering
AST07MEDIUM
URL using raw IP addresstests/test_model_validation_utils.py:959 · URL using raw IP address — may bypass domain-based filtering
AST07