Is azure-mcp@3.0.0-beta.2 safe to install?

azure-mcp@3.0.0-beta.2

VERIFIED

Publisher claims: "Azure MCP Server - Model Context Protocol implementation for Azure" Observed in sandbox: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher ohos-ports · joined 7 days agoInstalls 285Last detonated 5d ago

$claude mcp add azure-mcp -- npx -y @ohos-ports/azure-mcp

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-29 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.1sprocessexited 1: Missing required package: '@ohos-ports/azure-mcp-linux-x64'. Follow the troubleshooting steps - https://aka.ms/azmcp/troubleshooting#platform-package-installation-issues

1.6snetworkCONNECT https://registry.npmjs.org

1.6sprocessexec /usr/bin/timeout

1.6sprocessexec /usr/local/bin/npm

1.6sprocessexited 1: npm error A complete log of this run can be found in: /tmp/ks-detonate-CZ4S07/task/home/.npm/_logs/2026-10-29T10_38_48_729Z-debug-0.log

1.6sclaimedno tools/list reply (exit 1)

1.6sprocessscript backend runs setup only

Static findings

HIGH

Coercive compliance languageREADME.md:563 · Coercive compliance languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

MEDIUM

npx invocation of non-well-known packageindex.js:102 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageindex.js:103 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageindex.js:101 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06