korean-law-mcp@4.15.13
CAUTIONPublisher claims: "법제처 42개 API → 9개 MCP 도구. 법령·판례·조례·조약 + 다단계 리서치(legal_research, 8 task) + 정밀분석(legal_analysis: 인용검증·판례생사·행위시법·영향그래프) + 시점 비교(time_travel) + 상황별 5단계 안내(action_plan) + 국세청 해석례(nts)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher chrisryugj · joined 0 days agoInstalls 20,372Last detonated 1 h ago
Behavior trace
Honeypot run · 1 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.5sprocessdependency install exit 1
0.6sprocessexec /usr/bin/timeout
0.6sprocessexited 1: Node.js v22.23.4
0.6sclaimedno tools/list reply (exit 1)
0.7sprocessscript backend runs setup only
Static findings
HIGH
File permission modification commandbuild/setup.js:8 · File permission modification command — agent changes file ownership/permissions
AST05MEDIUM
File type combined with upload actionbuild/lib/cli-executor.js:123 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
npx invocation of non-well-known packagebuild/setup.d.ts:4 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
npx invocation of non-well-known packageREADME.md:187 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
File type combined with upload actionbuild/cli.js:311 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
Access to sensitive file pathsREADME.md:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05MEDIUM
File type combined with upload actionbuild/lib/cli-executor.js:138 · File type combined with upload action — agent may exfiltrate local data files
AST07MEDIUM
File type combined with upload actionbuild/cli.js:154 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
npx invocation of non-well-known packagebuild/setup.js:4 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
Access to sensitive file pathsREADME.md:270 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
References a credential file in the home directoryREADME.md:109 · References a credential file in the home directory
AST03CRITICAL
Reads credential paths from the home directoryREADME.md:109 · Reads credential paths from the home directory
AST03HIGH
npx invocation of non-well-known packagebuild/index.js:32 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
File type combined with upload actionbuild/lib/cli-executor.js:131 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
npx invocation of non-well-known packageREADME.md:48 · npx invocation of non-well-known package — may execute untrusted code
AST06