Skills/PyPI/a2a-mcp-server

a2a-mcp-server@0.1.5

CAUTION

Publisher claims: "A bridge server that connects Model Context Protocol (MCP) with Agent-to-Agent (A2A) protocol" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher gongrzhe · joined 0 days agoInstalls 137Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1
0.1sprocessexec /usr/bin/timeout
0.1sprocessexec .venv/bin/a2a-mcp-server
0.1sprocessexited 127: timeout: failed to run command '.venv/bin/a2a-mcp-server': No such file or directory
0.1sclaimedno tools/list reply (exit 127)
0.1sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packagePKG-INFO:102 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressPKG-INFO:315 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:246 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:278 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressPKG-INFO:283 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addressPKG-INFO:283 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
npx invocation of non-well-known packageREADME.md:65 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Outbound HTTP to raw IP addressPKG-INFO:330 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addressREADME.md:293 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)PKG-INFO:42 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addressREADME.md:278 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressREADME.md:293 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:5 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addressREADME.md:246 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressPKG-INFO:315 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addressPKG-INFO:330 · URL using raw IP address — may bypass domain-based filtering
AST07