headless@0.164.11

CAUTION

Publisher claims: "Lower-level WorkPaper formula runtime for Node services with JSON persistence and verified formula readback." Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher bilig · joined 0 days agoInstalls 68,105Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL

Access to sensitive file pathsdist/n8n-forecast-server-cli.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:398 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

npx invocation of non-well-known packageREADME.md:505 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actiondist/agent-start-cli.js:452 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageSKILL.md:79 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageSKILL.md:78 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsdist/n8n-forecast-server-bin.js:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05