Is po-mcp-proxy@0.0.1-alpha.98 safe to install?

Skills/npm/po-mcp-proxy

po-mcp-proxy@0.0.1-alpha.98

CAUTION· not started

Publisher claims: "MCP proxy server package" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher agimon-ai · publishing for 253 daysInstalls 30,865Last detonated 8d ago

What would fix this Watch Dispute verdict

Coverage

Not started: dependency install failed; the server itself was not observed.

Tested: the dependency install step · every file read, file written and host contacted by what ran
Not tested: server startup · the tool list · tool behavior

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

Code inventory arrives with this version's next honeypot run.

It will ask for: unknown until the next run
Where it talks to: unknown until the next run
What the honeypot saw: no credential files read · no network
What we could not test: server startup · the tool list · tool behavior

Not enough was observed to say yet. Not started: dependency install failed; the server itself was not observed. This version's code has not been inventoried for credentials and hosts either; both arrive with its next honeypot run (popular servers first). `vet-skills try po-mcp-proxy` runs it now and prints the full answer.

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-07 and scored it 78/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Auto-update or dynamic fetch configuration; Outbound HTTP to raw IP address; Outbound HTTP to raw IP address. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.8sprocessdependency install exit 1

1.0sprocessexec /usr/bin/date

1.0sprocessexec /usr/bin/timeout

1.0sclaimedno tools/list reply (exit 0)

1.0sprocessscript backend runs setup only

1.0sprocessno install scripts to re-run

Static findings

MEDIUM

File type combined with upload actiondist/cli.cjs:7 · File type combined with upload action — agent may exfiltrate local data files

Next steps:`);for(let e of p)console.log(`  • ${e}`);console.log(``)}d.length>0&&console.error(`\nTools/skills not found: ${d.join(`, `)}`),l.length===0&&u.length===0&&(console.error(`No tools or skil

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

HIGH

Auto-update or dynamic fetch configurationdist/src-DNeIN6IO.cjs:1 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{if(i&&typeof i==`obje

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

File type combined with upload actiondist/cli.cjs:2 · File type combined with upload action — agent may exfiltrate local data files

const e=require("./src-DNeIN6IO.cjs");let t=require("node:fs/promises"),n=require("node:path"),r=require("node:crypto"),i=require("@agimon-ai/foundation-process-registry"),a=require("js-yaml");a=e.mt(

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

HIGH

Outbound HTTP to raw IP addressdist/src-DBmrQF6t.mjs:1 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Outbound HTTP to raw IP addressdist/src-DNeIN6IO.cjs:1 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{if(i&&typeof i==`obje

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

HIGH

Auto-update or dynamic fetch configurationdist/src-DBmrQF6t.mjs:1 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

File type combined with upload actiondist/cli.cjs:4 · File type combined with upload action — agent may exfiltrate local data files

`);for(let e of l)console.log(`Server: ${e.server}`),console.log(`Tool: ${e.name}`),console.log(`Description: ${e.description||`No description`}`),console.log(`Input Schema:`),console.log(JSON.stringi

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondist/cli.mjs:2 · File type combined with upload action — agent may exfiltrate local data files

import{C as e,F as t,I as n,L as r,P as i,R as a,S as o,T as s,_ as c,b as l,d as u,g as d,h as f,j as p,l as m,n as h,o as g,pt as _,r as v,t as y,u as b,v as ee,x,y as S,z as C}from"./src-DBmrQF6t.m

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DNeIN6IO.cjs:1 · MCP server using network transport (SSE/HTTP) — data sent over network

var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{if(i&&typeof i==`obje

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

File type combined with upload actiondist/src-DBmrQF6t.mjs:9 · File type combined with upload action — agent may exfiltrate local data files

`).length}}function Qn(e){return Buffer.byteLength(e,`utf8`)}function $n(e){if(typeof e!=`number`||!Number.isFinite(e))return;let t=Math.floor(e);return t>0?t:void 0}function er(e){let t=process.env[e

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondist/src-DNeIN6IO.cjs:1 · File type combined with upload action — agent may exfiltrate local data files

var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{if(i&&typeof i==`obje

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondist/cli.mjs:141 · File type combined with upload action — agent may exfiltrate local data files

`;function P(e=``){console.log(e)}function F(e,t){console.error(t?`${e} ${t}`:e)}const I={info:e=>P(e),error:(e,t)=>F(e,t)},L={info:e=>P(e),warning:e=>P(`Warning: ${e}`),error:e=>F(e),success:e=>P(e),

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DBmrQF6t.mjs:1 · MCP server using network transport (SSE/HTTP) — data sent over network

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/cli.cjs:141 · MCP server using network transport (SSE/HTTP) — data sent over network

`;function T(e=``){console.log(e)}function E(e,t){console.error(t?`${e} ${t}`:e)}const D={info:e=>T(e),error:(e,t)=>E(e,t)},O={info:e=>T(e),warning:e=>T(`Warning: ${e}`),error:e=>E(e),success:e=>T(e),

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

File type combined with upload actiondist/src-DNeIN6IO.cjs:4 · File type combined with upload action — agent may exfiltrate local data files

`).trimEnd():c===`folded`?i[o]=s.join(` `).trim():i[o]=s.join(``).trim()),o=null,s=[],c=null,l=0};for(let e=0;e<a.length;e++){let t=a[e],n=t.trim(),r=t.indexOf(`:`);if(r!==-1&&!t.startsWith(` `)&&!t.s

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File permission modification commanddist/src-DBmrQF6t.mjs:1 · File permission modification command — agent changes file ownership/permissions

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.

AST05

MEDIUM

File type combined with upload actiondist/src-DNeIN6IO.cjs:9 · File type combined with upload action — agent may exfiltrate local data files

`).length}}function fn(e){return Buffer.byteLength(e,`utf8`)}function pn(e){if(typeof e!=`number`||!Number.isFinite(e))return;let t=Math.floor(e);return t>0?t:void 0}function mn(e){let t=process.env[e

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondist/cli.cjs:141 · File type combined with upload action — agent may exfiltrate local data files

`;function T(e=``){console.log(e)}function E(e,t){console.error(t?`${e} ${t}`:e)}const D={info:e=>T(e),error:(e,t)=>E(e,t)},O={info:e=>T(e),warning:e=>T(`Warning: ${e}`),error:e=>E(e),success:e=>T(e),

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

File type combined with upload actiondist/cli.mjs:4 · File type combined with upload action — agent may exfiltrate local data files

`);for(let e of l)console.log(`Server: ${e.server}`),console.log(`Tool: ${e.name}`),console.log(`Description: ${e.description||`No description`}`),console.log(`Input Schema:`),console.log(JSON.stringi

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

URL using raw IP addressdist/src-DNeIN6IO.cjs:1 · URL using raw IP address — may bypass domain-based filtering

var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,i,o,s)=>{if(i&&typeof i==`obje

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

File type combined with upload actiondist/src-DBmrQF6t.mjs:4 · File type combined with upload action — agent may exfiltrate local data files

`).trimEnd():c===`folded`?i[o]=s.join(` `).trim():i[o]=s.join(``).trim()),o=null,s=[],c=null,l=0};for(let e=0;e<a.length;e++){let t=a[e],n=t.trim(),r=t.indexOf(`:`);if(r!==-1&&!t.startsWith(` `)&&!t.s

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/cli.mjs:141 · MCP server using network transport (SSE/HTTP) — data sent over network

`;function P(e=``){console.log(e)}function F(e,t){console.error(t?`${e} ${t}`:e)}const I={info:e=>P(e),error:(e,t)=>F(e,t)},L={info:e=>P(e),warning:e=>P(`Warning: ${e}`),error:e=>F(e),success:e=>P(e),

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DBmrQF6t.mjs:9 · MCP server using network transport (SSE/HTTP) — data sent over network

`).length}}function Qn(e){return Buffer.byteLength(e,`utf8`)}function $n(e){if(typeof e!=`number`||!Number.isFinite(e))return;let t=Math.floor(e);return t>0?t:void 0}function er(e){let t=process.env[e

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

File type combined with upload actiondist/src-DBmrQF6t.mjs:1 · File type combined with upload action — agent may exfiltrate local data files

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DBmrQF6t.mjs:55 · MCP server using network transport (SSE/HTTP) — data sent over network

`,inputSchema:D.toJSONSchema(X,{reused:`inline`})}}async coerceToolArgs(e,t,n){let r=await this.definitionsCacheService.getToolSchema(e,t);if(!r)return n;let i=ze(r);return A(n,i)}executeSkill(e){retu

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

URL using raw IP addressdist/src-DBmrQF6t.mjs:1 · URL using raw IP address — may bypass domain-based filtering

import{access as e,chmod as t,lstat as n,mkdir as r,mkdtemp as i,open as a,readFile as o,readdir as s,rename as c,rm as l,stat as u,unlink as d,utimes as f,watch as p,writeFile as m}from"node:fs/promi

Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DNeIN6IO.cjs:9 · MCP server using network transport (SSE/HTTP) — data sent over network

`).length}}function fn(e){return Buffer.byteLength(e,`utf8`)}function pn(e){if(typeof e!=`number`||!Number.isFinite(e))return;let t=Math.floor(e);return t>0?t:void 0}function mn(e){let t=process.env[e

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/src-DNeIN6IO.cjs:55 · MCP server using network transport (SSE/HTTP) — data sent over network

`,inputSchema:v.z.toJSONSchema(X,{reused:`inline`})}}async coerceToolArgs(e,t,n){let r=await this.definitionsCacheService.getToolSchema(e,t);if(!r)return n;let i=(0,D.jsonSchemaToZod)(r);return(0,D.co

Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

File type combined with upload actiondist/cli.mjs:7 · File type combined with upload action — agent may exfiltrate local data files

Next steps:`);for(let e of p)console.log(`  • ${e}`);console.log(``)}d.length>0&&console.error(`\nTools/skills not found: ${d.join(`, `)}`),l.length===0&&u.length===0&&(console.error(`No tools or skil

Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.

AST07

Cost to the agent

Instructions loaded

≈49 tok

1 file · 10 in bundle

Tool list per prompt

≈0 tok

0 tools · 0 per tool

Handshake

no reply

launch to tools/list, stdio

Undocumented tools

description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @agimon-ai/po-mcp-proxy@0.0.1-alpha.98 as of 8d ago. This is the package itself, not its dependencies.

What would make this Verified

2 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%

Unclaimed publisher≈ +8 on the totalClaim agimon-ai: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
Auto-update or dynamic fetch configuration≈ +4 on the totalPin versions and sources; vendor anything fetched at install time.
Outbound HTTP to raw IP address≈ +4 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
MCP server using network transport (SSE/HTTP)≈ +2 on the totalNamespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.

Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim agimon-ai Propose a patch to the maintainer

Watch this skill

One email when po-mcp-proxy gets a new release, its verdict moves, or the maintainer changes. Free, no account needed.

Safer alternatives

Verified skills that do a similar job.

mcp-remote95 · Verified
punkpeye · npm · 5,459,825 installs · proxy
slack-mcp-server95 · Verified
korotovsky · npm · 185,187 installs · proxy
mcp-wordpress-remote95 · Verified
automattic · npm · 142,607 installs · proxy

README badge

Shows the live score and label; updates itself as new versions are detonated. Paste into your README or registry listing:

[![KillerSkills verdict for po-mcp-proxy](https://killerskills.ai/badge/npm/po-mcp-proxy.svg)](https://killerskills.ai/skills/npm/po-mcp-proxy?ref=badge)

Version history

0.0.1-alpha.12883 · Verified

0.0.1-alpha.11983 · Verified

0.0.1-alpha.10683 · Verified

0.0.1-alpha.9878 · Caution

0.0.1-alpha.8778 · Caution

0.0.1-alpha.8178 · Caution

0.0.1-alpha.7778 · Caution

Stable for 2 days. Same maintainers since first release.

Declared permissions

networknone

filesystem./ (project)

memorynone

3 of 3 declarations honored in sandbox.

Block it everywhere

vet-skills block po-mcp-proxy
--org acme --reason "v_d9c8"