Skills/npm/powerbi-modeling-mcp

powerbi-modeling-mcp@1.0.0

BLOCKED

Publisher claims: "Power BI Authoring MCP Server - Node.js client packaging to author Power BI semantic models in Power BI Desktop, Microsoft Fabric workspaces, and local PBIP and TMDL files." Observed in sandbox: reads credential files, sends data to registry.npmjs.org.

Registry npm (MCP server)Publisher microsoft · joined 4 days agoInstalls 64,727Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.8sfilesystemread ~/.npmrc
0.8sfilesystemread ~/.npm/_logs · ~/.npm/_cacache/index-v5/2d/e7/85afe0f4a24aa895609883c78cee16763b605deb26df7d7bfa5479853149 · ~/.npm/_cacache/index-v5/e5/1f/6a73e869701971e1bf26e3a516faad11b4f27c572ac0e33b72475ddfa49c · ~/.npm/_cacache/index-v5/39/3d/03d043fbe39e78702f50a36d102297a6925e221fe7a15c7265bf6f4e9a04 · ~/.npm/_cacache/index-v5/09/52/49e69f894350eb37910d45ff641183efbfd32fb12d63375e94d285e4ffd6 · ~/.npm/_cacache/index-v5/5f/9d/b6551b5c1a76989eb3ac76bdb408baa811c137a65a71882a8168c4e50f59 outside project
0.8snetworkCONNECT https://registry.npmjs.org
0.8snetworkCONNECT https://registry.npmjs.org
0.8snetworkCONNECT https://registry.npmjs.org
0.8snetworkCONNECT https://registry.npmjs.org
0.8snetworkCONNECT https://registry.npmjs.org
0.8sprocessexec /usr/bin/timeout
0.8sprocessexec /app/apps/web/node_modules/.bin/npm
0.8sprocessexec /root/.cache/node/corepack/v1/pnpm/10.28.0/dist/node-gyp-bin/npm
0.8sprocessexec /app/node_modules/.bin/npm
0.8sprocessexec /pnpm/npm
0.8sprocessexec /usr/local/sbin/npm
0.8sprocessexec /usr/local/bin/npm
0.8sprocessexited 1: - /tmp/ks-detonate-XadjHJ/task/home/work/acme-api/.claude/skills/powerbi-modeling-mcp/index.js
0.8sclaimedno tools/list reply (exit 1)
0.8sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageindex.js:130 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageindex.js:131 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Coercive compliance languageREADME.md:138 · Coercive compliance language
AST01
HIGH
npx invocation of non-well-known packageindex.js:129 · npx invocation of non-well-known package — may execute untrusted code
AST06