Skills/npm/commhub-server

commhub-server@0.9.0-preview.139

CAUTION

Publisher claims: "CommHub Server — AI Agent communication hub with MCP protocol, multi-network isolation, user auth, and MCP tools (17 collaboration-core + node/provider ops tools; authoritative list: docs-site/docs/api/mcp-tools.md)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher sleep2agi · joined 0 days agoInstalls 38,401Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.5sprocessdependency install exit 1
0.6sprocessexec /usr/bin/timeout
0.6sprocessexited 1: Node.js v22.23.4
0.6sclaimedno tools/list reply (exit 1)
0.6sprocessscript backend runs setup only

Static findings

HIGH
File permission modification commandsrc/tools.ts:890 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
File type combined with upload actionsrc/server.ts:3886 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagebin/commhub.ts:10 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagebin/commhub.ts:9 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathssrc/side-thread.test.ts:259 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/uploads.test.ts:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresssrc/node-attrs.test.ts:37 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:35 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionsrc/db-adapter.ts:491 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionsrc/tools.ts:2009 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Outbound HTTP to raw IP addresssrc/serve-error.test.ts:26 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
File type combined with upload actionsrc/tools.ts:1919 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagebin/commhub.ts:6 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionsrc/tools.ts:1922 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionsrc/server.ts:3787 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionsrc/server.ts:3636 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Access to sensitive file pathssrc/uploads.test.ts:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
File permission modification commandsrc/tools.ts:5126 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Outbound HTTP to raw IP addresssrc/node-attrs.test.ts:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Access to sensitive file pathssrc/uploads.test.ts:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionsrc/tools.ts:2024 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagebin/commhub.ts:7 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathssrc/uploads.test.ts:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionsrc/server.ts:3600 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
File permission modification commandsrc/tools.ts:915 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathssrc/uploads.test.ts:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresssrc/serve-error.test.ts:26 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionsrc/tools.ts:1971 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionsrc/server.ts:1946 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagebin/commhub.ts:8 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressREADME.md:35 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Credential pass-through configurationsrc/rest-identity.ts:15 · Credential pass-through configuration — agent relays sensitive credentials
AST02
MEDIUM
File type combined with upload actionsrc/db-adapter.ts:273 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
URL with embedded credentialssrc/avatar-validate.ts:81 · URL with embedded credentials — may be phishing or credential leaking
AST07