Skills/npm/brave-search-mcp-server

brave-search-mcp-server@2.1.4

CAUTION

Publisher claims: "Brave Search MCP Server: web results, images, videos, rich results, AI summaries, and more." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher brave · joined 0 days agoInstalls 93,582Last detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
2.0sprocessdependency install exit 1
2.3sprocessexec /usr/bin/timeout
2.3sprocessexited 1: Node.js v22.23.4
2.3sclaimedno tools/list reply (exit 1)
2.3sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsdist/config.js:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:439 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.test.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.js:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:416 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.test.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.js:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.test.js:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/config.js:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/protocols/http.test.js:181 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressREADME.md:427 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:429 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresspackage.json:37 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsdist/config.test.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandpackage.json:29 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Outbound HTTP to raw IP addressREADME.md:429 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:232 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Access to sensitive file pathsdist/config.test.js:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressdist/protocols/http.test.js:52 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresspackage.json:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:245 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Outbound HTTP to raw IP addressdist/protocols/http.test.js:52 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:427 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageREADME.md:245 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:318 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:274 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:225 · npx invocation of non-well-known package — may execute untrusted code
AST06