Skills/npm/agnoclast-mcp

agnoclast-mcp@0.9.262

CAUTION

Publisher claims: "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher theronap · joined 0 days agoInstalls 15,191Last detonated 1 h ago
Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH
npx invocation of non-well-known packagelib/editors/claude.mjs:102 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathslib/diagnose.mjs:84 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandlib/custom_sources.mjs:142 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
npx invocation of non-well-known packagebin/cortex-mcp.mjs:97 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/doctor.mjs:24 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathslib/edge_extract.mjs:121 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagelib/capture_status.mjs:24 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/antigravity.mjs:12 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/doctor.mjs:75 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/channel.mjs:265 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagebin/cortex-mcp.mjs:157 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagebin/cortex-mcp.mjs:16 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagebin/cortex-mcp.mjs:310 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/diagnose.mjs:794 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/claude.mjs:91 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagebin/cortex-mcp.mjs:106 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresslib/diagnose.mjs:584 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Access to sensitive file pathslib/diagnose.mjs:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagelib/doctor.mjs:112 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/channel.mjs:33 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/use_brain.mjs:48 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/claude.mjs:117 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionlib/report_spool.mjs:168 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagelib/setup.mjs:25 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/setup.mjs:71 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/claude.mjs:161 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/install.mjs:80 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addresslib/diagnose.mjs:584 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
npx invocation of non-well-known packagelib/managed.mjs:30 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/log/SKILL.md:70 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/setup.mjs:135 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/uninstall.mjs:146 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/setup.mjs:73 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionlib/redact.mjs:28 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagelib/uninstall.mjs:17 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/uninstall.mjs:133 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/codex.mjs:101 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/author-docs/SKILL.md:24 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/codex.mjs:28 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathslib/with_token.mjs:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Instructs the agent to modify its persistent memory or instruction fileslib/rename_notice.mjs:29 · Instructs the agent to modify its persistent memory or instruction files
AST01
HIGH
npx invocation of non-well-known packagelib/rename_notice.mjs:30 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/publish_targets.mjs:15 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/log/SKILL.md:85 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/setup.mjs:43 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/uninstall.mjs:130 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/author-docs/SKILL.md:58 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagelib/editors/claude.mjs:111 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionlib/report_spool.mjs:167 · File type combined with upload action — agent may exfiltrate local data files
AST07
agnoclast-mcp@0.9.262 safety verdict: Caution 45/100 — KillerSkills