Skills/npm/mcp-server-atlassian-bitbucket

mcp-server-atlassian-bitbucket@3.1.0

CAUTION

Publisher claims: "Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MC" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher aashari · joined 0 days agoInstalls 21,873Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.9sprocessdependency install exit 1
1.0sprocessexec /usr/bin/timeout
1.0sprocessexited 1: Node.js v22.23.4
1.0sclaimedno tools/list reply (exit 1)
1.0sprocessscript backend runs setup only

Static findings

HIGH
Outbound HTTP to raw IP addressdist/index.js:95 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageCHANGELOG.md:626 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification commandCHANGELOG.md:198 · File permission modification command — agent changes file ownership/permissions
AST05
CRITICAL
Context shift attemptREADME.md:514 · Context shift attempt — trying to change operational mode
AST01
HIGH
npx invocation of non-well-known packageREADME.md:85 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:79 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:82 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCHANGELOG.md:647 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsCHANGELOG.md:116 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Context shift attemptREADME.md:462 · Context shift attempt — trying to change operational mode
AST01
HIGH
npx invocation of non-well-known packageREADME.md:132 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:76 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCHANGELOG.md:633 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification command.releaserc.json:10 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsdocs/MODERNIZATION-ANALYSIS.md:257 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:88 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Outbound HTTP to raw IP addressdist/index.js:98 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Access to sensitive file pathsdist/utils/config.util.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:5 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packagedocs/OIDC-TRUSTED-PUBLISHING-SETUP.md:78 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:102 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Access to sensitive file pathsdist/utils/config.util.d.ts:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:43 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:6 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Access to sensitive file pathsdist/utils/config.util.js:56 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:95 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Access to sensitive file pathsdist/utils/config.util.js:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:109 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:653 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Access to sensitive file pathsdist/utils/config.util.d.ts:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressdist/index.js:95 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressdist/index.js:98 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Access to sensitive file pathsdist/utils/config.util.js:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/utils/config.util.js:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05