mcp-server@1.0.30
VERIFIEDPublisher claims: "Verified npm launcher for the open-source ContextStream Rust MCP server" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server)Publisher contextstream · joined 0 days agoInstalls 7,593Last detonated 2 h ago
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-26 and scored it 82/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 2 s · 2 scenariost+CategoryObserved action
0.0sprocessno install scripts in bundle
1.7sfilesystemread ~/.cache/contextstream/mcp/v1.0.30/linux-x64/metadata.json · ~/.cache/contextstream/mcp/v1.0.30/linux-x64/contextstream-mcp outside project
1.7sfilesystemwrote ~/.cache/contextstream/mcp/v1.0.30/linux-x64/.install.lock · ~/.cache/contextstream/mcp/v1.0.30/linux-x64/contextstream-mcp.3297-bc7b301b-b109-4ded-b060-602aea5f7601.tmp · ~/.cache/contextstream/mcp/v1.0.30/linux-x64/metadata.json.3297-bc7b301b-b109-4ded-b060-602aea5f7601.tmp
1.7sprocessexec /usr/bin/timeout
1.7sprocessexec /tmp/ks-detonate-vQiAGT/task/home/.cache/contextstream/mcp/v1.0.30/linux-x64/contextstream-mcp
1.7sprocessexited 1: /tmp/ks-detonate-vQiAGT/task/home/.cache/contextstream/mcp/v1.0.30/linux-x64/contextstream-mcp: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.39' not found (required by /tmp/ks-detonate-
1.7sclaimedno tools/list reply (exit 1)
1.7sprocessscript backend runs setup only
Static findings
HIGH
Access to sensitive file pathsnpm/launcher.mjs:367 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05No other findings across 785 lines in 9 files.