Skills/npm/common

common@0.38.0

CAUTION

Publisher claims: "Shared utilities for @atlassian-dc-mcp MCP servers. Not affiliated with Atlassian." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher atlassian-dc-mcp · joined 0 days agoInstalls 38,551Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.7sprocessdependency install exit 1
0.8sprocessexec /usr/bin/timeout
0.8sprocessexited 1: Node.js v22.23.4
0.8sclaimedno tools/list reply (exit 1)
0.8sprocessscript backend runs setup only

Static findings

HIGH
Access to sensitive file pathssrc/config/__tests__/sources/env-file.test.ts:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/attachment-gateway.ts:118 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/config/sources/env-file.js:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/setup/args.js:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/__tests__/runtime-config.test.js:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/__tests__/attachment-gateway.test.ts:91 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/__tests__/attachment-gateway.test.ts:147 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/config/sources/env-file.ts:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/config/sources/home-file.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/config/sources/home-file.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/__tests__/runtime-config.test.ts:118 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/__tests__/runtime-config.test.js:100 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/config/__tests__/sources/env-file.test.ts:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/__tests__/runtime-config.test.ts:120 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/config/__tests__/sources/env-file.test.ts:94 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsbuild/attachment-gateway.js:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/config/sources/home-file.ts:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionsrc/__tests__/attachment-gateway.test.ts:120 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Access to sensitive file pathssrc/setup/args.ts:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/config/sources/home-file.ts:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05