Skills/npm/mcp-config-glean

mcp-config-glean@5.4.1

VERIFIED

Publisher claims: "Glean-specific MCP configuration defaults and helpers" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher gleanwork · joined 0 days agoInstalls 30,735Last detonated 1 h ago

$claude mcp add mcp-config-glean -- npx -y @gleanwork/mcp-config-glean

Report an issue

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.5sprocessdependency install exit 1

0.5sprocessexec /usr/bin/timeout

0.5sprocessexited 1: Node.js v22.23.4

0.5sclaimedno tools/list reply (exit 1)

0.5sprocessscript backend runs setup only

Static findings

HIGH

npx invocation of non-well-known packagedist/index.js:34 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagedist/index.cjs:67 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:40 · npx invocation of non-well-known package — may execute untrusted code

AST06