Skills/npm/auth0-mcp-server

auth0-mcp-server@0.1.0-beta.19

CAUTION

Publisher claims: "Auth0 Model Context Protocol (MCP) Server (Beta) — A secure and extendable implementation of an MCP server that provides AI assistants with controlled access to the Auth0 Management API through natural language. This project is in beta and not intended fo" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher auth0 · joined 0 days agoInstalls 33,439Last detonated 53 min ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.7sprocessdependency install exit 1
0.8sprocessexec /usr/bin/timeout
0.8sprocessexited 1: Node.js v22.23.4
0.8sclaimedno tools/list reply (exit 1)
0.8sprocessscript backend runs setup only

Static findings

HIGH
Hidden zero-width characters detectedREADME.md:575 · Hidden zero-width characters detected — may conceal content
AST07
HIGH
npx invocation of non-well-known packageREADME.md:68 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:239 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
URL with embedded credentialsREADME.md:7 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
npx invocation of non-well-known packageREADME.md:82 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Context shift attemptREADME.md:535 · Context shift attempt — trying to change operational mode
AST01
HIGH
Access to sensitive file pathsREADME.md:233 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Context shift attemptREADME.md:550 · Context shift attempt — trying to change operational mode
AST01
HIGH
npx invocation of non-well-known packageREADME.md:93 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:62 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:74 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/commands/session.js:55 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/tools/onboarding.js:180 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/commands/run.js:54 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/commands/run.js:34 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification commandpackage.json:28 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsdist/tools/applications.js:443 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/index.js:57 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/index.js:58 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/tools/quickstarts.js:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/tools/onboarding.js:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/tools/quickstarts.js:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/tools/quickstarts.js:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:8 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Access to sensitive file pathsdist/tools/quickstarts.js:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:9 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packagedist/commands/run.js:35 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/commands/run.js:45 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/index.js:56 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/utils/onboarding.js:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/tools/onboarding.js:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/commands/run.js:46 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/index.js:55 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:7 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packagedist/commands/session.js:20 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/index.js:59 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actiondist/utils/glob.js:85 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/utils/glob.js:74 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/utils/glob.d.ts:55 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/utils/glob.d.ts:46 · File type combined with upload action — agent may exfiltrate local data files
AST07