Skills/PyPI/3dcitydb-mcp-server

3dcitydb-mcp-server@1.0.0

CAUTION

Publisher claims: "MCP server for natural-language querying of 3DCityDB v5 semantic city models" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher tum-gis · joined 0 days agoInstalls 359Last detonated 2 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.3sprocessdependency install exit 1
0.4sprocessexec /usr/bin/timeout
0.4sprocessexec .venv/bin/3dcitydb-mcp
0.4sprocessexited 127: timeout: failed to run command '.venv/bin/3dcitydb-mcp': No such file or directory
0.4sclaimedno tools/list reply (exit 127)
0.4sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsPKG-INFO:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsPKG-INFO:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:98 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathspyproject.toml:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/agent.py:88 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsPKG-INFO:137 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:74 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/db.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/generate_prompt.py:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/doctor.py:100 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/doctor.py:108 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/generate_prompt.py:1 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/agent.py:95 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/citydb_mcp/doctor.py:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Rule modification attempttests/prompt_output/newHarthof_prompt.md:56 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attempttests/prompt_output/newHarthof_prompt.md:25 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Rule modification attempttests/prompt_output/newHarthof_prompt.md:40 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Access to sensitive file pathstests/generate_prompt.py:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/generate_prompt.py:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/citydb_mcp/agent.py:71 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathstests/generate_prompt.py:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathstests/test_assembly.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Rule modification attempttests/prompt_output/newHarthof_prompt.md:53 · Rule modification attempt — overwriting existing instructions
AST01
CRITICAL
Access to sensitive file pathstests/test_server.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Rule modification attempttests/prompt_output/newHarthof_prompt.md:46 · Rule modification attempt — overwriting existing instructions
AST01
MEDIUM
URL using raw IP addresssrc/citydb_mcp/agent.py:71 · URL using raw IP address — may bypass domain-based filtering
AST07