Skills/npm/openapi-mcp-generator

openapi-mcp-generator@5.0.1

CAUTION

Publisher claims: "Generates MCP server code from OpenAPI specifications" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher harsha-iiiv · joined 0 days agoInstalls 52,429Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.5sprocessdependency install exit 1
0.6sprocessexec /usr/bin/timeout
0.6sprocessexited 1: Node.js v22.23.4
0.6sclaimedno tools/list reply (exit 1)
0.6sprocessscript backend runs setup only

Static findings

HIGH
Access to sensitive file pathsdist/generator/config-files.js:100 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:152 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/config-files.js:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/inbound-auth.d.ts:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/generator/cloudflare-worker.js:968 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/env-file.js:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:419 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/inbound-auth.js:141 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/generator/cloudflare-worker.js:226 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
File permission modification commanddist/generator/package-json.js:21 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Access to sensitive file pathsdist/generator/config-files.js:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:51 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/env-file.js:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/inbound-auth.js:150 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:60 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/env-file.d.ts:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/env-file.d.ts:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/server-code.js:130 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:18 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:57 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/env-file.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/config-files.js:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:111 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/generator/cloudflare-worker.js:972 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedist/generator/cloudflare-worker.js:971 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsREADME.md:242 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/env-file.d.ts:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:258 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/env-file.js:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedist/generator/cloudflare-worker.js:185 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdist/generator/env-file.d.ts:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/server-code.js:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/inbound-auth.d.ts:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/config-files.js:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/generator/inbound-auth.d.ts:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:276 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionREADME.md:68 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionREADME.md:74 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/index.js:262 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actiondist/generator/cloudflare-worker.js:28 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
File permission modification commandpackage.json:31 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
File type combined with upload actionREADME.md:18 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/index.js:260 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionREADME.md:77 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedist/index.js:258 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/index.js:12 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
npx invocation of non-well-known packagedist/utils/parser-security.js:26 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionREADME.md:71 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Access to sensitive file pathsdist/index.js:367 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
openapi-mcp-generator@5.0.1 safety verdict: Caution 63/100 — KillerSkills