Skills/npm/context7-mcp

context7-mcp@4.4.4

CAUTION

Publisher claims: "MCP server for Context7" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher upstash · joined 0 days agoInstalls 2.6MLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 4 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

3.6sprocessdependency install exit 1

4.0sprocessexec /usr/bin/timeout

4.0sprocessexited 1: Node.js v22.23.4

4.0sclaimedno tools/list reply (exit 1)

4.1sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsdist/lib/api.js:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/constants.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/index.js:652 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/constants.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/api.js:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:1468 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/api.js:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:1462 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsREADME.md:1471 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/constants.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/api.js:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/constants.js:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/api.js:63 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/telemetry-config.js:1 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:318 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/lib/telemetry-config.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/oauth-audience.js:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:84 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/lib/oauth-token-validation.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/oauth-audience.js:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

URL with embedded credentialsREADME.md:7 · URL with embedded credentials — may be phishing or credential leaking

AST07

CRITICAL

Access to sensitive file pathsdist/lib/encryption.js:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:142 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/lib/constants.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/vercelMarketplaceJwt.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/vercelMarketplaceJwt.js:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/mcp-http-auth.js:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsdist/lib/telemetry-provider.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packagedist/lib/auth/auth-prompt.js:21 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:1573 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packageREADME.md:1370 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:1339 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandpackage.json:64 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/lib/auth/auth-prompt.js:22 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:1539 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:1197 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04