Skills/npm/plugin-mcp-chat-backend

plugin-mcp-chat-backend@0.14.1

VERIFIED· install only

Publisher claims: "" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher backstage-community · publishing for 394 daysInstalls 8,135Last detonated 3d ago
$claude mcp add plugin-mcp-chat-backend -- npx -y @backstage-community/plugin-mcp-chat-backend
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-11 and scored it 89/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packageconfig.schema.json:83 · npx invocation of non-well-known package — may execute untrusted code"description": "NPX command to run the MCP server (for npm packages)",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.d.ts:1138 · npx invocation of non-well-known package — may execute untrusted code* @throws Error if npx cannot be found or is not functionalFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/utils.cjs.js:83 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`Found npx at: ${npxPath}`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/services/MCPClientServiceImpl.cjs.js:188 · MCP server using network transport (SSE/HTTP) — data sent over networkif (serverConfig.type === types.MCPServerType.STREAMABLE_HTTP) {Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packagedist/index.d.ts:1137 · npx invocation of non-well-known package — may execute untrusted code* @returns Promise resolving to the path to the npx executableFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/utils.cjs.js:89 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`npx not found at: ${npxPath}`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/services/MCPClientServiceImpl.cjs.js:242 · npx invocation of non-well-known package — may execute untrusted code// Ensure node is in PATH when using npxFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.d.ts:47 · npx invocation of non-well-known package — may execute untrusted code* // STDIO server using npxFix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/utils.cjs.js:37 · MCP server using network transport (SSE/HTTP) — data sent over networktype = types.MCPServerType.STREAMABLE_HTTP;Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packagedist/utils.cjs.js:71 · npx invocation of non-well-known package — may execute untrusted codeconsole.log(`Searching for npx in: ${possiblePaths.join(", ")}`);Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.d.ts:1134 · npx invocation of non-well-known package — may execute untrusted code* Helper function to find npx executable path.Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/index.d.ts:60 · MCP server using network transport (SSE/HTTP) — data sent over network* type: MCPServerType.STREAMABLE_HTTP,Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)dist/types.cjs.js:6 · MCP server using network transport (SSE/HTTP) — data sent over networkMCPServerType2["STREAMABLE_HTTP"] = "streamable-http";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
npx invocation of non-well-known packagedist/services/MCPClientServiceImpl.cjs.js:217 · npx invocation of non-well-known package — may execute untrusted code`Failed to find npx for server '${serverConfig.name}': ${error instanceof Error ? error.message : error}. Please ensure Node.js is properly installed with npx available.`Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/index.d.ts:76 · npx invocation of non-well-known package — may execute untrusted code/** NPX package command to run (for STDIO servers) */Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/utils.cjs.js:94 · npx invocation of non-well-known package — may execute untrusted code"npx not found. Please ensure Node.js is properly installed with npm."Fix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈37 tok
1 file · 28 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for @backstage-community/plugin-mcp-chat-backend@0.14.1 as of 3d ago. This is the package itself, not its dependencies.