a2cr-mcp@0.1.8

CAUTION

Publisher claims: "Local MCP workspace for AI agent handoff checkpoints, WorkStash notes, and WorkThreads." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher a2cr · joined 0 days agoInstalls 381Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessdependency install exit 1

0.1sprocessexec /usr/bin/timeout

0.1sprocessexec .venv/bin/a2cr-mcp

0.1sprocessexited 127: timeout: failed to run command '.venv/bin/a2cr-mcp': No such file or directory

0.1sclaimedno tools/list reply (exit 127)

0.1sprocessscript backend runs setup only

Static findings

CRITICAL

Prompt injectiondocs/official-distribution-roadmap.md:57 · Prompt injection — known jailbreak technique reference

AST01

CRITICAL

Prompt injectiondocs/official-distribution-roadmap.md:219 · Prompt injection — known jailbreak technique reference

AST01

HIGH

Access to sensitive file pathsCONTRIBUTING.md:71 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsPKG-INFO:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsA2CR.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesdocs/local-mode-spec.md:754 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Access to sensitive file pathsREADME-ja.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languagedocs/official-distribution-roadmap.md:219 · Authorization escalation language

AST01

HIGH

Access to sensitive file pathsPKG-INFO:292 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsSECURITY.md:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languagedocs/local-mode-spec.md:355 · Authorization escalation language

AST01

HIGH

Access to sensitive file pathsa2cr_mcp/server.py:737 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsdocs/templates/skills/a2cr-agent/SKILL.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Authorization escalation languagedocs/official-distribution-roadmap.md:57 · Authorization escalation language

AST01

HIGH

Access to sensitive file pathsa2cr_mcp/local_workspace/codex_config.py:259 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsa2cr_mcp/local_workspace/codex_config.py:32 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsdocs/security-model.md:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressdocs/usage.md:61 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressdocs/usage.md:66 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actiondocs/official-distribution-roadmap.md:185 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Access to sensitive file pathsdocs/articles/a2cr-beginner-ja.md:96 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsREADME.md:124 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsa2cr_mcp/local_workspace/codex_config.py:257 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsdocs/local-mode-spec.md:286 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsREADME.md:262 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsa2cr_mcp.egg-info/PKG-INFO:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsa2cr_mcp/server.py:1147 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsSECURITY.md:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsa2cr_mcp.egg-info/PKG-INFO:292 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesdocs/mcp-setup.md:100 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Outbound HTTP to raw IP addressdocs/usage.md:61 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsdocs/mcp-setup.md:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsSECURITY.md:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addressdocs/usage.md:66 · URL using raw IP address — may bypass domain-based filtering

AST07