ctxlint@0.28.0

CAUTION

Publisher claims: "Linter for AI agent context files and MCP configs: CLAUDE.md, AGENTS.md, .cursorrules, .mcp.json - catches broken paths, wrong commands, leaked secrets" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher yawlabs · joined 0 days agoInstalls 54,960Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.7sprocessdependency install exit 1

0.7sprocessexec /usr/bin/timeout

0.7sprocessexited 1: ctxlint: fallback to Node failed (Cannot find module '/tmp/ks-detonate-I91PiC/task/home/work/acme-api/.claude/skills/ctxlint/dist/index.js' imported from /tmp/ks-detonate-I91PiC/task/home/wo

0.7sclaimedno tools/list reply (exit 1)

0.7sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsCONTEXT_LINT_SPEC.md:754 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsmcp-config-lint-rules.json:269 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known package.pre-commit-hooks.yaml:7 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandbin/ctxlint.mjs:577 · Process kill command — agent can terminate processes

AST05

CRITICAL

Reads credential paths from the home directorymcp-config-lint-rules.json:453 · Reads credential paths from the home directory

AST03

HIGH

npx invocation of non-well-known packagecontext-lint-rules.json:147 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagecontext-lint-rules.json:148 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageAGENT_SESSION_LINT_SPEC.md:412 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:125 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageAGENT_SESSION_LINT_SPEC.md:414 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageaction.yml:37 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsMCP_CONFIG_LINT_SPEC.md:315 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:41 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageCONTEXT_LINT_SPEC.md:366 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageMCP_CONFIG_LINT_SPEC.md:189 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsagent-session-lint-rules.json:200 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsAGENT_SESSION_LINT_SPEC.md:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:128 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagemcp-config-lint-rules.json:211 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsCONTEXT_LINT_SPEC.md:752 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsmcp-config-lint-rules.json:453 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:152 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsMCP_CONFIG_LINT_SPEC.md:181 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandbin/ctxlint.mjs:578 · Process kill command — agent can terminate processes

AST05

CRITICAL

Reads credential paths from the home directoryagent-session-lint-rules.json:200 · Reads credential paths from the home directory

AST03

HIGH

npx invocation of non-well-known packageMCP_CONFIG_LINT_SPEC.md:272 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Reads credential paths from the home directoryMCP_CONFIG_LINT_SPEC.md:181 · Reads credential paths from the home directory

AST03

HIGH

Process kill commandbin/ctxlint.mjs:582 · Process kill command — agent can terminate processes

AST05

CRITICAL

Credential pass-through configurationAGENT_SESSION_LINT_SPEC.md:504 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

npx invocation of non-well-known packageREADME.md:131 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Access to sensitive file pathsMCP_CONFIG_LINT_SPEC.md:151 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageCONTEXT_LINT_SPEC.md:383 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagemcp-config-lint-rules.json:212 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagemcp-config-lint-rules.json:213 · npx invocation of non-well-known package — may execute untrusted code

AST06