Skills/PyPI/br-eli-mcp

br-eli-mcp@0.8.3

VERIFIED

Publisher claims: "MCP server for Camara dos Deputados (bills), legis.senado.leg.br (Normas Juridicas by URN Lex), normas.leg.br (real article text), DataJud CNJ (court docket metadata), STJ Open Data, CARF, TST and TCU (real ruling text) - Brazilian federal legislation and case law with verifiable citations." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher matematicsolutions · joined 7 days agoInstalls 285Last detonated 6d ago
$claude mcp add br-eli-mcp -- uvx br-eli-mcp
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-10-28 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1
0.1sprocessexec /usr/bin/timeout
0.1sprocessexec .venv/bin/br-eli-mcp
0.1sprocessexited 127: timeout: failed to run command '.venv/bin/br-eli-mcp': No such file or directory
0.1sclaimedno tools/list reply (exit 127)
0.1sprocessscript backend runs setup only

Static findings

MEDIUM
Privileged sudo command.github/workflows/release.yml:90 · Privileged sudo command — agent may execute with elevated privilegesFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05

No other findings across 6,312 lines in 50 files.