edt-bridge-mcp@0.37.2
VERIFIED· not startedPublisher claims: "stdio MCP front-end for the edt-bridge 1C:EDT plugin: EDT's own diagnostics, metadata and types, query validation, write tools, infobases and a debugger; proxies to a running EDT, or auto-starts a headless one" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher keyfire · publishing for 119 daysInstalls 4,762Last detonated 7d ago
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
Code inventory arrives with this version's next honeypot run.- It will ask for
- unknown until the next run
- Where it talks to
- unknown until the next run
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Not enough was observed to say yet. Not started: dependency install failed; the server itself was not observed. This version's code has not been inventoried for credentials and hosts either; both arrive with its next honeypot run (popular servers first). `vet-skills try edt-bridge-mcp` runs it now and prints the full answer.
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-07 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.2sprocessdependency install exit 1
0.2sprocessexec /usr/bin/date
0.2sprocessexec /usr/bin/timeout
0.2sprocessexec .venv/bin/edt-bridge-mcp
0.2sclaimedno tools/list reply (exit 0)
0.2sprocessscript backend runs setup only
0.2sprocessno install scripts to re-run
Static findings
MEDIUM
Process kill commandsrc/edt_bridge_mcp/i18n.py:214 · Process kill command — agent can terminate processes
AST05"en": "kill the headless session when it does not stop within the timeout",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/native_form.py:151 · Python subprocess execution detected
AST05process = subprocess.Popen(argv, cwd=log.parent, env=env, stdin=subprocess.DEVNULL, stdout=output,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:1023 · Process kill command — agent can terminate processes
AST05"description": "kill the headless session when it does not stop in time "Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/headless.py:35 · Python subprocess execution detected
AST05child = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_headless_startup.py:128 · Python subprocess execution detected
AST05result = subprocess.run([sys.executable, "-c", parent, json.dumps(command)],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_cli_docs.py:119 · Python subprocess execution detected
AST05out = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_discovery.py:271 · Python subprocess execution detected
AST05result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:523 · Python subprocess execution detected
AST05raw = subprocess.run(["powershell", "-NoProfile", "-Command", query],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_conventions.py:43 · Python subprocess execution detected
AST05looking for the text `subprocess.run(` at the head of a call looks straight past a callableFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:528 · Python subprocess execution detected
AST05out = subprocess.run(["ps", "-eo", "pid=,ppid=,args="], capture_output=True, text=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:752 · Python subprocess execution detected
AST05raw = subprocess.run(["powershell", "-NoProfile", "-Command", query],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:479 · Process kill command — agent can terminate processes
AST05search let shutdown --force for one bridge kill the EDT of another. The workspace is theFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:710 · Python subprocess execution detected
AST05self._headless_process = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:745 · Process kill command — agent can terminate processes
AST05# so without it the shell reports - and force would kill - its own process.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:990 · Process kill command — agent can terminate processes
AST05"rerun with --force to kill it")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:775 · Python subprocess execution detected
AST05subprocess.run(["taskkill", "/PID", str(pid), "/T", "/F"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/update.py:700 · Python subprocess execution detected
AST05result = subprocess.run(argv, capture_output=True, text=True, encoding="utf-8",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:96 · Process kill command — agent can terminate processes
AST05line is already handled as non-JSON, and a log message must never kill the process.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Python subprocess execution detectedtests/test_headless_startup.py:123 · Python subprocess execution detected
AST05"p=subprocess.Popen(json.loads(sys.argv[1]),stdin=subprocess.DEVNULL,"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File type combined with upload actiontests/test_headless_startup.py:208 · File type combined with upload action — agent may exfiltrate local data files
AST07state, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
Python subprocess execution detectedtests/test_release_notes.py:73 · Python subprocess execution detected
AST05run = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Process kill commandtests/test_open_gui.py:157 · Process kill command — agent can terminate processes
AST05manager. Without --force the command says which pids are left rather than kill them."""Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
File type combined with upload actiontests/test_headless_startup.py:150 · File type combined with upload action — agent may exfiltrate local data files
AST07state, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
Python subprocess execution detectedtests/test_release_notes.py:85 · Python subprocess execution detected
AST05run = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_wrapper_lifecycle.py:225 · Python subprocess execution detected
AST05holder = subprocess.Popen([sys.executable, "-c", code, str(lock)], stdin=subprocess.PIPE,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/test_update.py:791 · Python subprocess execution detected
AST05result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
File type combined with upload actiontests/test_headless_startup.py:113 · File type combined with upload action — agent may exfiltrate local data files
AST07state, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
Process kill commandtests/test_open_gui.py:3 · Process kill command — agent can terminate processes
AST05The manual routine this replaces is: find 1cedtcli in the task manager, kill it, start EDT. So theFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.MEDIUM
Process kill commandtests/test_open_gui.py:170 · Process kill command — agent can terminate processes
AST05"""The keepalive shell goes first - it is the CLI's parent, so a tree kill from belowFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.Cost to the agent
Instructions loaded
≈90 tok
1 file · 45 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for edt-bridge-mcp@0.37.2 as of 7d ago. This is the package itself, not its dependencies.