a4sx-mcp@0.1.0rc2
CAUTIONPublisher claims: "Local MCP server (stdio) for a4sx: search, load and save coding-agent sessions from any MCP client." Observed in sandbox: static analysis only — behavior not yet observed.
Registry PyPI (MCP server)Publisher crossvault · joined 0 days agoInstalls 0Last detonated 1 h ago
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
HIGH
Hidden zero-width characters detectedtests/test_envelope.py:61 · Hidden zero-width characters detected — may conceal content
AST07HIGH
Access to sensitive file pathstests/test_tools.py:398 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Outbound HTTP to raw IP addresstests/stub_server.py:59 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07MEDIUM
URL using raw IP addresstests/test_tools.py:140 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
Hex-encoded string detectedsrc/a4sx_mcp/context.py:154 · Hex-encoded string detected — may contain obfuscated payloads
AST07MEDIUM
URL using raw IP addresstests/stub_server.py:59 · URL using raw IP address — may bypass domain-based filtering
AST07HIGH
References a credential file in the home directorytests/test_tools.py:398 · References a credential file in the home directory
AST03HIGH
Access to sensitive file pathssrc/a4sx_mcp/tools.py:500 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Hidden zero-width characters detectedtests/test_envelope.py:64 · Hidden zero-width characters detected — may conceal content
AST07HIGH
Outbound HTTP to raw IP addresstests/test_tools.py:140 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07