atlan@1.0.0

CAUTION

Publisher claims: "Atlan data catalog plugin for Claude Code. Search, explore, govern, and manage your data assets through natural language. Powered by the Atlan MCP server with semantic search, lineage traversal, glossary management, data quality rules, and more." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher atlanhq · joined 0 days agoInstalls 0Last detonated 54 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedmodelcontextprotocol/Dockerfile:19 · Destructive file system command detected

AST05

CRITICAL

Pipe-to-shell patternmodelcontextprotocol/README.md:87 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Access to sensitive file pathsmodelcontextprotocol/settings.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsmodelcontextprotocol/docs/LOCAL_BUILD.md:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)modelcontextprotocol/README.md:6 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Access to sensitive file pathsmodelcontextprotocol/docs/LOCAL_BUILD.md:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellmodelcontextprotocol/README.md:87 · Remote installer piped to shell

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:11 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Access to sensitive file pathsmodelcontextprotocol/settings.py:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05