Skills/npm/opencode-mcp

opencode-mcp@3.0.0

CAUTION

Publisher claims: "MCP server for OpenCode coding workflows, durable async jobs, project resources, and explicit user input" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher alaeddinemessadi · joined 0 days agoInstalls 76,177Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 2 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
1.7sprocessdependency install exit 1
2.0sprocessexec /usr/bin/timeout
2.0sprocessexited 1: Node.js v22.23.4
2.0sclaimedno tools/list reply (exit 1)
2.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsdist/index.js:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/index.js:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/tools/project.js:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressdist/helpers.js:597 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:88 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsdist/tools/workflow.js:109 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressREADME.md:88 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressdist/helpers.js:582 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsdist/index.js:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageCHANGELOG.md:320 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
URL using raw IP addressdist/helpers.js:582 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathsdist/jobs.js:173 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addressdist/index.js:11 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressdist/helpers.js:597 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsdist/tools/workflow.js:123 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:26 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Authorization escalation languageCHANGELOG.md:277 · Authorization escalation language
AST01
CRITICAL
Access to sensitive file pathsdist/index.js:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdist/tools/provider.js:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)CHANGELOG.md:182 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addressdist/index.js:11 · URL using raw IP address — may bypass domain-based filtering
AST07