Skills/npm/testsprite-mcp

testsprite-mcp@0.0.47

VERIFIED

Publisher claims: "The TestSprite MCP plugin brings fully automated software testing into your coding workflow. It connects your IDE's AI assistant (like Cursor or Copilot) with TestSprite's intelligent testing engine to automatically generate, execute, and debug integratio" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher testsprite · joined 0 days agoInstalls 34,305Last detonated 1 h ago
$claude mcp add testsprite-mcp -- npx -y @testsprite/testsprite-mcp
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Authorization escalation languageREADME.md:103 · Authorization escalation language
AST01
MEDIUM
File type combined with upload actiondist/assets/modification/assets/pgsql-Dy0bjov7.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondist/assets/modification/assets/sql-BdTr02Mf.js:1 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Unicode escape sequence detecteddist/assets/modification/assets/swift-D7IUmUK8.js:1 · Unicode escape sequence detected — may contain obfuscated payloads
AST07
LOW
Unpinned dependencyREADME.md:43 · Unpinned dependency
AST06
HIGH
npx invocation of non-well-known packageREADME.md:45 · npx invocation of non-well-known package — may execute untrusted code
AST06