Skills/npm/desktop-commander

desktop-commander@0.3.1

CAUTION

Publisher claims: "MCP server for terminal operations and file editing" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher wonderwhy-er · joined 0 days agoInstalls 1.1MLast detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 5 s · 2 scenarios · 0 deviations
t+CategoryObserved action
4.0sprocessdependency install exit 1
4.4sprocessexec /usr/bin/timeout
4.4sprocessexited 1: Node.js v22.23.4
4.4sclaimedno tools/list reply (exit 1)
4.4sprocessscript backend runs setup only

Static findings

CRITICAL
Pipe-to-shell patternREADME.md:120 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
CRITICAL
Access to sensitive file pathsdist/bootstrap.js:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/bootstrap.js:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/capture.js:262 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/terminal-manager.js:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commanddist/command-manager.js:205 · Privileged sudo command — agent may execute with elevated privileges
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:176 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:175 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/terminal-manager.js:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/terminal-manager.js:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/terminal-manager.js:114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/capture.js:64 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/terminal-manager.js:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:177 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/server.js:116 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/shell.js:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:96 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:126 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsdist/utils/shell.js:85 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/system-info.js:16 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/system-info.js:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:101 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandREADME.md:53 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packageREADME.md:92 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Access to sensitive file pathsdist/utils/shell.js:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/system-info.js:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/shell.js:87 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/capture.js:417 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/utils/shell.js:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:112 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/npm-scripts/remote.js:39 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/npm-scripts/remote.js:40 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commanddist/terminal-manager.js:435 · Process kill command — agent can terminate processes
AST05
HIGH
Direct script execution from GitHub raw URLREADME.md:120 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Auto-update or dynamic fetch configurationREADME.md:81 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
npx invocation of non-well-known packagedist/npm-scripts/remote.js:42 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Direct script execution from GitHub raw URLREADME.md:274 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Direct script execution from GitHub raw URLREADME.md:201 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Auto-update or dynamic fetch configurationREADME.md:299 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Process kill commanddist/terminal-manager.js:147 · Process kill command — agent can terminate processes
AST05
HIGH
Direct script execution from GitHub raw URLREADME.md:277 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Process kill commanddist/terminal-manager.js:236 · Process kill command — agent can terminate processes
AST05
HIGH
Direct script execution from GitHub raw URLREADME.md:294 · Direct script execution from GitHub raw URL — unverified code source
AST06
HIGH
Auto-update or dynamic fetch configurationREADME.md:836 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Process kill commanddist/tools/process.js:86 · Process kill command — agent can terminate processes
AST05
HIGH
npx invocation of non-well-known packagedist/npm-scripts/remote.js:41 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification commanddist/tools/filesystem.js:83 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Process kill commanddist/tools/schemas.js:44 · Process kill command — agent can terminate processes
AST05
MEDIUM
Remote installer piped to shellREADME.md:120 · Remote installer piped to shell
AST07
HIGH
File permission modification commandpackage.json:39 · File permission modification command — agent changes file ownership/permissions
AST05