Skills/npm/slack-mcp-server

slack-mcp-server@1.3.0

BLOCKED

Publisher claims: "Model Context Protocol (MCP) server for Slack Workspaces. This integration supports both Stdio and SSE transports, proxy settings and does not require any permissions or bots being created or approved by Workspace admins" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher korotovsky · joined 0 days agoInstalls 115KLast detonated 2 h ago
Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)README.md:2 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Access to sensitive file pathsREADME.md:325 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsbin/index.js:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsbin/index.js:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsbin/index.js:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsbin/index.js:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:288 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Access to sensitive file pathsbin/index.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05