Skills/Docker MCP Catalog/clickhouse

clickhouse@0.7.0

CAUTION

Publisher claims: "Official ClickHouse MCP Server" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher clickhouse · joined 0 days agoInstalls 376KLast detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.7sprocessdependency install exit 1
0.7sprocessexec /usr/bin/timeout
0.7sprocessexec .venv/bin/mcp-clickhouse
0.7sprocessexited 127: timeout: failed to run command '.venv/bin/mcp-clickhouse': No such file or directory
0.7sclaimedno tools/list reply (exit 127)
0.7sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsREADME.md:277 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsmcp_clickhouse/auth.py:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:263 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsCHANGELOG.md:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detected.github/workflows/ci.yaml:115 · Destructive file system command detected
AST05
CRITICAL
Access to sensitive file pathsmcp_clickhouse/auth.py:217 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsAGENTS.md:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:268 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:261 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:265 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsCHANGELOG.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_startup_contract.py:184 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Instructs the agent to modify its persistent memory or instruction files.claude/agents/docs-drift-reviewer.md:62 · Instructs the agent to modify its persistent memory or instruction files
AST01
CRITICAL
Access to sensitive file pathsmcp_clickhouse/auth.py:266 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_auth_config.py:258 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_auth_config.py:179 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_auth_config.py:244 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_auth_config.py:220 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_startup_contract.py:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Instructs the agent to modify its persistent memory or instruction files.claude/agents/docs-drift-reviewer.md:31 · Instructs the agent to modify its persistent memory or instruction files
AST01
CRITICAL
Access to sensitive file pathstests/test_auth_config.py:250 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressREADME.md:210 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagemcp_clickhouse/skills_advisor.py:9 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Python subprocess execution detectedtests/test_auth_config.py:385 · Python subprocess execution detected
AST05
HIGH
URL with embedded credentialstests/test_context_config_override.py:315 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:83 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Python subprocess execution detectedtests/test_startup_contract.py:44 · Python subprocess execution detected
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:51 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)AGENTS.md:53 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:696 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:36 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:693 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Outbound HTTP to raw IP addresstests/test_protocol_compat.py:279 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:878 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:709 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Python subprocess execution detectedtests/test_auth_config.py:418 · Python subprocess execution detected
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)AGENTS.md:18 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
URL with embedded credentialstests/test_context_config_override.py:364 · URL with embedded credentials — may be phishing or credential leaking
AST07
MEDIUM
URL using raw IP addressREADME.md:210 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:232 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_auth_config.py:152 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_auth_config.py:94 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)mcp_clickhouse/transport.py:20 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_auth_config.py:189 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)mcp_clickhouse/mcp_env.py:533 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addresstests/test_protocol_compat.py:279 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_http_security_boundary.py:843 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_startup_contract.py:889 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_auth_config.py:205 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_http_security_boundary.py:432 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_startup_contract.py:186 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)tests/test_auth_config.py:106 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
clickhouse@0.7.0 safety verdict: Caution 63/100 — KillerSkills