Skills/npm/agent-install

agent-install@0.0.8

CAUTION

Publisher claims: "Install SKILL.md files, MCP servers, and AGENTS.md guidance for any coding agent. Ships both a Node API and a CLI." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher abai · joined 0 days agoInstalls 10.6MLast detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
1.8sprocessdependency install exit 1
2.1sprocessexec /usr/bin/timeout
2.1sprocessexited 1: Node.js v22.23.4
2.1sclaimedno tools/list reply (exit 1)
2.1sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsdist/mcp-Ccqdolho.cjs:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/cli.cjs:252 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsbin/agent-install.mjs:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/cli.js:249 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/mcp-Ccqdolho.cjs:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/mcp-D24Z3PhI.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-DzD0NuUN.js:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-DzD0NuUN.js:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-Ca0auZkf.cjs:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-Ca0auZkf.cjs:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-DzD0NuUN.js:50 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-DzD0NuUN.js:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/mcp-D24Z3PhI.js:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-Ca0auZkf.cjs:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-Ca0auZkf.cjs:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-Ca0auZkf.cjs:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/skill-DzD0NuUN.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actiondist/skill-DzD0NuUN.js:624 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Auto-update or dynamic fetch configurationdist/mcp-D24Z3PhI.js:16 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Auto-update or dynamic fetch configurationdist/mcp-Ccqdolho.cjs:17 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
npx invocation of non-well-known packageREADME.md:8 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Hex-encoded string detecteddist/skill-Ca0auZkf.cjs:1001 · Hex-encoded string detected — may contain obfuscated payloads
AST07
HIGH
Hex-encoded string detecteddist/skill-DzD0NuUN.js:1001 · Hex-encoded string detected — may contain obfuscated payloads
AST07
MEDIUM
File type combined with upload actiondist/skill-Ca0auZkf.cjs:624 · File type combined with upload action — agent may exfiltrate local data files
AST07