Skills/npm/storage-mcp

storage-mcp@0.6.0

VERIFIED

Publisher claims: "Model Context Protocol (MCP) Server for interacting with GCS APIs" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher google-cloud · joined 0 days agoInstalls 166KLast detonated 2 h ago
$claude mcp add storage-mcp -- npx -y @google-cloud/storage-mcp
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:56 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:65 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:73 · npx invocation of non-well-known package — may execute untrusted code
AST06