Skills/npm/npm-deprecated-check

npm-deprecated-check@2.1.1

CAUTION

Publisher claims: "Check for deprecated packages" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher kid-joker · joined 0 days agoInstalls 24,549Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

HIGH

npx invocation of non-well-known packagepackage.json:71 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:186 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actiondist/chunks/cli.mjs:2 · File type combined with upload action — agent may exfiltrate local data files

AST07