abi-to-mcp@0.1.0

CAUTION

Publisher claims: "UCAI — The ABI-to-MCP Server Generator. Convert smart contract ABIs to AI-ready MCP servers." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher nirholas · joined 0 days agoInstalls 77Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessdependency install exit 1

0.1sprocessexec /usr/bin/timeout

0.1sprocessexec .venv/bin/abi-to-mcp

0.1sprocessexited 127: timeout: failed to run command '.venv/bin/abi-to-mcp': No such file or directory

0.1sclaimedno tools/list reply (exit 127)

0.1sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsPKG-INFO:517 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/cli/commands/serve.py:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionsrc/abi_to_mcp/__init__.py:11 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedsrc/abi_to_mcp/cli/commands/serve.py:76 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/cli/commands/serve.py:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/generator/server_generator.py:287 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/generator/server_generator.py:148 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/cli/commands/serve.py:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsREADME.md:475 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/generator/server_generator.py:266 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/cli/commands/serve.py:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/cli/commands/serve.py:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/abi_to_mcp/generator/server_generator.py:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05