Skills/PyPI/aaep-mcp-bridge

aaep-mcp-bridge@1.0.0

CAUTION

Publisher claims: "Bidirectional bridge between the Model Context Protocol (MCP) and AAEP" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher ramseyxlil · joined 0 days agoInstalls 32Last detonated 53 min ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1
0.1sprocessexec /usr/bin/timeout
0.1sprocessexec .venv/bin/aaep-mcp-bridge
0.1sprocessexited 127: timeout: failed to run command '.venv/bin/aaep-mcp-bridge': No such file or directory
0.1sclaimedno tools/list reply (exit 127)
0.1sprocessscript backend runs setup only

Static findings

CRITICAL
Credential pass-through configurationREADME.md:231 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Credential pass-through configurationaaep_mcp_bridge.egg-info/PKG-INFO:268 · Credential pass-through configuration — agent relays sensitive credentials
AST02
HIGH
npx invocation of non-well-known packageREADME.md:79 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:86 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagePKG-INFO:123 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagePKG-INFO:116 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Credential pass-through configurationPKG-INFO:268 · Credential pass-through configuration — agent relays sensitive credentials
AST02
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge/__init__.py:13 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge/server.py:310 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge.egg-info/PKG-INFO:123 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge/server.py:11 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge.egg-info/PKG-INFO:116 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageaaep_mcp_bridge/server.py:303 · npx invocation of non-well-known package — may execute untrusted code
AST06