afd-server@2.1.0

CAUTION

Publisher claims: "Server-side utilities for building AFD-compliant MCP servers with Zod validation" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher lushly-dev · joined 0 days agoInstalls 85,009Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL

Destructive file system command detecteddist/json-rpc.js:58 · Destructive file system command detected

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)dist/server.js:175 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/server-types.d.ts:108 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:96 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/server.d.ts:13 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/server.js:144 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04