Skills/npm/screenpipe-mcp

screenpipe-mcp@0.20.3

CAUTION

Publisher claims: "MCP server for screenpipe - search your screen recordings and audio transcriptions" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher louis030195 · joined 0 days agoInstalls 25,148Last detonated 52 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Prompt injectionplugins/screenpipe-cloud/README.md:13 · Prompt injection — known jailbreak technique reference
AST01
HIGH
Authorization escalation languageplugins/screenpipe-cloud/README.md:13 · Authorization escalation language
AST01
HIGH
npx invocation of non-well-known packagescripts/assert-pack-contents.js:24 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:146 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressscripts/openclaw-smoke.mjs:37 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageREADME.md:197 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Context shift attemptplugins/screenpipe-cloud/README.md:13 · Context shift attempt — trying to change operational mode
AST01
HIGH
npx invocation of non-well-known packageRELEASE.md:185 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:186 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressscripts/hermes-smoke.py:28 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packageREADME.md:193 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:183 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagescripts/assert-pack-contents.js:11 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressmanifest.json:89 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Access to sensitive file pathssrc/team-auth.test.ts:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathssrc/stdio-startup.test.ts:150 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/http-server.test.ts:334 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/api-base.test.ts:16 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/stdio-startup.test.ts:149 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Access to sensitive file pathssrc/stdio-startup.test.ts:77 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/team-auth.test.ts:61 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/self-contained-pack.test.ts:26 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/stdio-lifecycle.test.ts:27 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/index.ts:90 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/cli.ts:23 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/stdio-startup.test.ts:282 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/index.ts:221 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/cli.ts:21 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/http-server.test.ts:278 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/cli.ts:12 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/stdio-startup.test.ts:419 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/api-base.test.ts:35 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/http-server.test.ts:221 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/http-server.test.ts:284 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/installers.test.ts:52 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/bundled-skills-transport.test.ts:49 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/index.ts:202 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/notification-request.ts:5 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Slack webhook URLsrc/generated/bundled-skills.ts:14 · Slack webhook URL — data will be sent to Slack
AST07
HIGH
npx invocation of non-well-known packagesrc/index.ts:218 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/stdio-startup.test.ts:76 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/cli.ts:11 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/http-server.test.ts:209 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/installers.test.ts:96 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresssrc/notification-request.test.ts:14 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
npx invocation of non-well-known packagesrc/stdio-startup.test.ts:457 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/index.ts:92 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagesrc/pack-contents.test.ts:167 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addresssrc/api-base.test.ts:14 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addresssrc/notification-request.ts:5 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressmanifest.json:89 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/team-auth.test.ts:75 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/api-base.test.ts:16 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/http-server.test.ts:209 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/api-base.test.ts:35 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/notification-request.test.ts:14 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/stdio-startup.test.ts:282 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
File type combined with upload actionscripts/build-installers.mjs:72 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addresssrc/http-server.test.ts:334 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/http-server.test.ts:221 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL with suspicious TLDsrc/generated/bundled-skills.ts:9 · URL with suspicious TLD — commonly used for phishing/malware
AST07
MEDIUM
File type combined with upload actionsrc/generated/bundled-skills.ts:9 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/installers.test.ts:137 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addresssrc/stdio-startup.test.ts:76 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresssrc/workflow-transport.test.ts:31 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addresssrc/http-server.test.ts:284 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressscripts/openclaw-smoke.mjs:37 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/self-contained-pack.test.ts:26 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/installers.test.ts:96 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/api-base.test.ts:14 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/stdio-startup.test.ts:149 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/stdio-lifecycle.test.ts:27 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/stdio-startup.test.ts:419 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresssrc/team-auth.test.ts:75 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
File type combined with upload actionscripts/build.mjs:35 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addresssrc/http-server.test.ts:278 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressscripts/hermes-smoke.py:28 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/workflow-transport.test.ts:31 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/installers.test.ts:52 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)src/installers.test.ts:138 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
File type combined with upload actionsrc/export-video.test.ts:110 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
URL using raw IP addresssrc/team-auth.test.ts:61 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresssrc/bundled-skills-transport.test.ts:49 · URL using raw IP address — may bypass domain-based filtering
AST07