Skills/npm/vision-memory-mcp

vision-memory-mcp@1.4.2

CAUTION

Publisher claims: "Persistent visual cache for LLM-driven software development. Caches screenshots using perceptual hashing, vector search, and AX trees to prevent token overhead and visual hallucination loops." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher putervision · joined 0 days agoInstalls 21,532Last detonated 51 min ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.8sprocessdependency install exit 1
0.9sprocessexec /usr/bin/timeout
0.9sprocessexited 1: Node.js v22.23.4
0.9sclaimedno tools/list reply (exit 1)
0.9sprocessscript backend runs setup only

Static findings

HIGH
Access to sensitive file pathsREADME.md:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Privileged sudo commanddist/cli.js:9956 · Privileged sudo command — agent may execute with elevated privileges
AST05
HIGH
URL with embedded credentialsdist/cli.js:8338 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
Access to sensitive file pathsdist/cli.js:186 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsREADME.md:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/cli.js:5160 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/cli.js:7629 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:7512 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:5114 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/cli.js:7641 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actiondist/cli.js:9729 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Access to sensitive file pathsdist/cli.js:7630 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:7500 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:7501 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdist/index.js:179 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05