Skills/PyPI/aaaa-nexus-mcp

aaaa-nexus-mcp@0.1.1

VERIFIED

Publisher claims: "Claude Code MCP plugin for the AAAA-Nexus trust, security, and agent infrastructure API" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher aaaa-nexus · joined 0 days agoInstalls 109Last detonated 1 h ago

$claude mcp add aaaa-nexus-mcp -- uvx aaaa-nexus-mcp

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Python subprocess execution detectedsrc/aaaa_nexus_mcp/tools/codex_local.py:121 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedsrc/aaaa_nexus_mcp/tools/ecosystem_rebuild.py:79 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedsrc/aaaa_nexus_mcp/tools/ecosystem_rebuild.py:220 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedtests/test_public_release.py:66 · Python subprocess execution detected

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)REGISTRY_SUBMISSION.md:69 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Python subprocess execution detectedsrc/aaaa_nexus_mcp/tools/ecosystem_rebuild.py:271 · Python subprocess execution detected

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)REGISTRY_SUBMISSION.md:68 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

File type combined with upload actionsrc/aaaa_nexus_mcp/tools/ecosystem_rebuild.py:295 · File type combined with upload action — agent may exfiltrate local data files

AST07