Skills/npm/state-memory-mcp

state-memory-mcp@1.4.1

CAUTION

Publisher claims: "Deterministic, persistent graph server for tracking workflow state, decisions, and blockers." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher putervision · joined 0 days agoInstalls 21,041Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.6sprocessdependency install exit 1

0.7sprocessexec /usr/bin/timeout

0.7sprocessexited 1: Node.js v22.23.4

0.7sclaimedno tools/list reply (exit 1)

0.7sprocessscript backend runs setup only

Static findings

HIGH

URL with embedded credentialsdist/chunk-2EHMFMOW.js:1300 · URL with embedded credentials — may be phishing or credential leaking

AST07

CRITICAL

Privileged sudo commanddist/cli.js:526 · Privileged sudo command — agent may execute with elevated privileges

AST05