apick-mcp@5.2.0
VERIFIEDPublisher claims: "APICK Korean data, building register, simple-auth lookups, OCR, search, image, video and TTS" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server) · listed in the official MCP RegistryPublisher apick · joined 1 days agoInstalls 0Last detonated 30 h ago
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-02 and scored it 88/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 2 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
1.5sprocessexec /usr/bin/timeout
1.5sclaimed189 tools: transfer_1won, account_realname, bank_code, crypto_market, identi_card1, identi_card2, identi_card3, identi_card4, identi_card5, identi_card_image1, identi_card_image2, identi_card_image3, identi_card_image4, identi_card_image5, name_rrn_auth, hide_rrn, identity_document_residence_card, identity_document_passport, identity_document_id_card, identity_document_driver_license, ocr, ocr_identi1, ocr_identi2, ocr_identi3, ocr_identi4
1.5sprocessscript backend runs setup only
Static findings
CRITICAL
Fake instruction boundary tagTOOLS.md:90 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagTOOLS.md:112 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01CRITICAL
Fake instruction boundary tagTOOLS.md:70 · Fake instruction boundary tagFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01