a4a-mcp@0.4.0.post1

CAUTION

Publisher claims: "A4A MCP server for connecting external agents to the A4A protocol" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher a4a-network · joined 0 days agoInstalls 0Last detonated 53 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessdependency install exit 1

0.1sprocessexec /usr/bin/timeout

0.1sprocessexec .venv/bin/a4a-mcp

0.1sprocessexited 127: timeout: failed to run command '.venv/bin/a4a-mcp': No such file or directory

0.1sclaimedno tools/list reply (exit 127)

0.1sprocessscript backend runs setup only

Static findings

HIGH

Unicode escape sequence detecteda4a_mcp/inbox_runtime.py:527 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

File permission modification commanda4a_mcp/identity.py:43 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Unicode escape sequence detecteda4a_mcp/untimed.py:56 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Python subprocess execution detecteda4a_mcp/setup_probe.py:35 · Python subprocess execution detected

AST05

HIGH

Outbound HTTP to raw IP addresstests/test_check_authority.py:31 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Python subprocess execution detectedtests/test_connect_plan.py:244 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detecteda4a_mcp/setup_runtime.py:70 · Python subprocess execution detected

AST05

HIGH

File permission modification commandDockerfile:105 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Unicode escape sequence detectedtests/test_check_authority.py:161 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

File permission modification commandDockerfile:84 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Destructive file system command detectedDockerfile:34 · Destructive file system command detected

AST05

HIGH

File permission modification commanda4a_mcp/identity.py:48 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detectedtests/test_connect_plan.py:225 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/test_channel_adapter.py:447 · Python subprocess execution detected

AST05

CRITICAL

Destructive file system command detectedDockerfile:109 · Destructive file system command detected

AST05

CRITICAL

Destructive file system command detectedDockerfile:62 · Destructive file system command detected

AST05

HIGH

Unicode escape sequence detectedtests/test_check_authority.py:167 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Python subprocess execution detectedtests/test_connect_plan.py:264 · Python subprocess execution detected

AST05

CRITICAL

Credential pass-through configurationtests/test_delivery_journal.py:13 · Credential pass-through configuration — agent relays sensitive credentials

AST02

HIGH

Unicode escape sequence detectedtests/test_full_cycle.py:308 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Python subprocess execution detectedtests/test_inbox_cli.py:30 · Python subprocess execution detected

AST05

HIGH

Unicode escape sequence detectedtests/test_full_reading.py:18 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_full_cycle.py:179 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

File type combined with upload actiona4a_mcp/inbox_runtime.py:540 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Unicode escape sequence detectedtests/test_private_pilot.py:218 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_public_text.py:121 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_file_tools.py:84 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Unicode escape sequence detectedtests/test_tools_full.py:145 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_full_cycle.py:180 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_full_reading.py:62 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_tools_full.py:142 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

URL using raw IP addresstests/test_file_tools.py:85 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Unicode escape sequence detectedtests/test_file_tools.py:147 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_file_tools.py:20 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Python subprocess execution detectedtests/test_wake_cli.py:19 · Python subprocess execution detected

AST05

HIGH

File permission modification commandtests/test_identity.py:53 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Access to sensitive file pathstests/test_file_tools.py:382 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Unicode escape sequence detectedtests/test_full_cycle.py:200 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_tools_full.py:43 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

File type combined with upload actiontests/test_file_tools.py:5 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Unicode escape sequence detectedtests/test_stage1_safety.py:100 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Process kill commandtests/test_public_text.py:150 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedtests/test_identity_continuity.py:101 · Python subprocess execution detected

AST05

HIGH

Unicode escape sequence detectedtests/test_private_pilot.py:217 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

URL using raw IP addresstests/test_file_tools.py:84 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_file_tools.py:85 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Unicode escape sequence detectedtests/test_tools_full.py:148 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_tools_full.py:66 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_public_text.py:119 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

URL using raw IP addresstests/test_check_authority.py:31 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Unicode escape sequence detectedtests/test_docs_match_tools.py:61 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_untrusted_output.py:15 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

HIGH

Unicode escape sequence detectedtests/test_full_reading.py:92 · Unicode escape sequence detected — may contain obfuscated payloads

AST07

MEDIUM

File type combined with upload actiontests/test_dialogue_runtime.py:410 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresstests/test_file_tools.py:382 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Python subprocess execution detectedtests/test_docs_match_tools.py:113 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/test_docs_match_tools.py:127 · Python subprocess execution detected

AST05

HIGH

Process kill commandtests/test_setup_installer.py:422 · Process kill command — agent can terminate processes

AST05

HIGH

Outbound HTTP to raw IP addresstests/test_file_tools.py:382 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07