chroma@0.2.6

CAUTION

Publisher claims: "A Model Context Protocol (MCP) server implementation that provides database capabilities for Chroma" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher chroma-core · joined 0 days agoInstalls 61,454Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.8sprocessdependency install exit 1

0.9sprocessexec /usr/bin/timeout

0.9sprocessexec .venv/bin/chroma-mcp

0.9sprocessexited 127: timeout: failed to run command '.venv/bin/chroma-mcp': No such file or directory

0.9sclaimedno tools/list reply (exit 127)

0.9sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsREADME.md:130 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:162 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell pattern.github/workflows/test.yml:24 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathssrc/chroma_mcp/server.py:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathssrc/chroma_mcp/server.py:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:182 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathstests/test_server.py:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathstests/test_server.py:77 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:189 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:183 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shell.github/workflows/test.yml:24 · Remote installer piped to shell

AST07

CRITICAL

Access to sensitive file pathsSECURITY.md:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05