Skills/npm/pi-mcp-extension

pi-mcp-extension@1.10.2

CAUTION

Publisher claims: "MCP (Model Context Protocol) client extension for the Pi coding agent — connect Pi to any MCP server" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher irahardianto · joined 0 days agoInstalls 400KLast detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathssrc/config.ts:333 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/transport-factory.ts:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/oauth-provider.ts:64 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathssrc/transport-factory.ts:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/config.ts:31 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:197 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/authorize-flow.ts:312 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:176 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathssrc/transport-factory.ts:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/config.ts:105 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/callback-server.ts:104 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/authorize-flow.ts:176 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathssrc/debug-log.ts:254 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresssrc/authorize-flow.ts:176 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:197 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Process kill commandsrc/stdio-process.ts:137 · Process kill command — agent can terminate processes
AST05
MEDIUM
URL using raw IP addresssrc/callback-server.ts:104 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:176 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Process kill commandsrc/stdio-process.ts:127 · Process kill command — agent can terminate processes
AST05
MEDIUM
URL using raw IP addresssrc/authorize-flow.ts:312 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/config.ts:31 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/oauth-provider.ts:64 · URL using raw IP address — may bypass domain-based filtering
AST07