Skills/PyPI/edt-bridge-mcp

edt-bridge-mcp@0.45.0

VERIFIED· not started

Publisher claims: "stdio MCP front-end for the edt-bridge 1C:EDT plugin: EDT's own diagnostics, metadata and types, query validation, write tools, infobases and a debugger; proxies to a running EDT, or auto-starts a headless one" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher keyfire · publishing for 119 daysInstalls 4,762Last detonated 22 h ago
$claude mcp add edt-bridge-mcp -- uvx edt-bridge-mcp
WatchReport an issue

Coverage

Not started: dependency install failed; the server itself was not observed.
Tested
the dependency install step · every file read, file written and host contacted by what ran
Not tested
server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
EDT_BRIDGE_TOKENConfiguration, not credentials: EDT_BRIDGE_AUTOSTART, EDT_BRIDGE_EDT_DIR, EDT_BRIDGE_HEAP, EDT_BRIDGE_NO_PLUGINS, EDT_BRIDGE_PORT, EDT_BRIDGE_PORT_SCAN, EDT_BRIDGE_START_TIMEOUT, EDT_BRIDGE_TOOLSET, EDT_BRIDGE_VMARGS, EDT_BRIDGE_WINDOW_WAIT, EDT_BRIDGE_WORKSPACE, LC_ALL, ProgramFiles
Where it talks to
no vendor host named in the codeAlso 1c.ru — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names 1c.ru as well as its own vendor. The guard injects EDT_BRIDGE_TOKEN only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- uvx edt-bridge-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-13 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.2sprocessdependency install exit 1 ·
0.2sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.2sprocessscript backend runs setup only
0.2sprocessno install scripts to re-run

Static findings

MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/headless.py:35 · Python subprocess execution detectedchild = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Hidden zero-width characters detectedsrc/edt_bridge_mcp/event_log.py:61 · Hidden zero-width characters detected — may conceal contentelif c in ", \r\n\t":Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Process kill commandsrc/edt_bridge_mcp/i18n.py:333 · Process kill command — agent can terminate processes"en": "kill the headless session when it does not stop within the timeout",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Hidden zero-width characters detectedtests/test_event_log.py:37 · Hidden zero-width characters detected — may conceal content"1CV8LOG(ver 2.0)\r\n0f1e2d3c-0000-4000-8000-000000000001\r\n\r\n" + records,Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Process kill commandtests/test_open_gui.py:170 · Process kill command — agent can terminate processes"""The keepalive shell goes first - it is the CLI's parent, so a tree kill from belowFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedtests/test_headless_startup.py:128 · Python subprocess execution detectedresult = subprocess.run([sys.executable, "-c", parent, json.dumps(command)],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:530 · Process kill command — agent can terminate processessearch let shutdown --force for one bridge kill the EDT of another. The workspace is theFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedtests/test_cli_docs.py:119 · Python subprocess execution detectedout = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_conventions.py:43 · Python subprocess execution detectedlooking for the text `subprocess.run(` at the head of a call looks straight past a callableFix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_release_notes.py:85 · Python subprocess execution detectedrun = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:835 · Python subprocess execution detectedsubprocess.run(["taskkill", "/PID", str(pid), "/T", "/F"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actiontests/test_headless_startup.py:208 · File type combined with upload action — agent may exfiltrate local data filesstate, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionsrc/edt_bridge_mcp/native_reports.py:138 · File type combined with upload action — agent may exfiltrate local data files"""Write junit.xml and allure-results/ of a form check report into `output`; returns their paths."""Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:1053 · Process kill command — agent can terminate processes"rerun with --force to kill it")Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandtests/test_open_gui.py:3 · Process kill command — agent can terminate processesThe manual routine this replaces is: find 1cedtcli in the task manager, kill it, start EDT. So theFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandtests/test_open_gui.py:157 · Process kill command — agent can terminate processesmanager. Without --force the command says which pids are left rather than kill them."""Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Hidden zero-width characters detectedtests/test_native_unit.py:83 · Hidden zero-width characters detected — may conceal contentPath(config["exitCode"]).write_text("" + exit_code + "\r\n", encoding="utf-8")Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedtests/test_discovery.py:271 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/native_form.py:226 · Python subprocess execution detectedprocess = subprocess.Popen(argv, cwd=log.parent, env=env, stdin=subprocess.DEVNULL, stdout=output,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:574 · Python subprocess execution detectedraw = subprocess.run(["powershell", "-NoProfile", "-Command", query],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:770 · Python subprocess execution detectedself._headless_process = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Hidden zero-width characters detectedtests/test_event_log.py:11 · Hidden zero-width characters detected — may conceal content"1CV8LOG(ver 2.0)\r\n0f1e2d3c-0000-4000-8000-000000000001\r\n\r\n"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
File type combined with upload actiontests/test_headless_startup.py:150 · File type combined with upload action — agent may exfiltrate local data filesstate, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedtests/test_release_notes.py:73 · Python subprocess execution detectedrun = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:1086 · Process kill command — agent can terminate processes"description": "kill the headless session when it does not stop in time "Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actiontests/test_ci_reports.py:174 · File type combined with upload action — agent may exfiltrate local data filesassert report["reports"] == {"junit": str(output / "junit.xml"), "allure": str(output / "allure-results")}Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedtests/test_headless_startup.py:123 · Python subprocess execution detected"p=subprocess.Popen(json.loads(sys.argv[1]),stdin=subprocess.DEVNULL,"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:579 · Python subprocess execution detectedout = subprocess.run(["ps", "-eo", "pid=,ppid=,args="], capture_output=True, text=True,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Hidden zero-width characters detectedtests/test_native_unit.py:84 · Hidden zero-width characters detected — may conceal contentPath(config["logging"]["file"]).write_text("" + log, encoding="utf-8")Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:102 · Process kill command — agent can terminate processesline is already handled as non-JSON, and a log message must never kill the process.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/server.py:812 · Python subprocess execution detectedraw = subprocess.run(["powershell", "-NoProfile", "-Command", query],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actiontests/test_headless_startup.py:113 · File type combined with upload action — agent may exfiltrate local data filesstate, output = tmp_path / "state.json", tmp_path / "output.log"Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Process kill commandsrc/edt_bridge_mcp/server.py:805 · Process kill command — agent can terminate processes# so without it the shell reports - and force would kill - its own process.Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedsrc/edt_bridge_mcp/update.py:804 · Python subprocess execution detectedresult = subprocess.run(argv, capture_output=True, text=True, encoding="utf-8",Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_update.py:908 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_wait_ready.py:226 · Python subprocess execution detecteddone = subprocess.run([sys.executable, "-c", "import sys; from edt_bridge_mcp.server import main; "Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_run_headless.py:24 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_wrapper_lifecycle.py:225 · Python subprocess execution detectedholder = subprocess.Popen([sys.executable, "-c", code, str(lock)], stdin=subprocess.PIPE,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_run_headless.py:105 · Python subprocess execution detectedreturn subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_update.py:965 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_update.py:937 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈90 tok
1 file · 70 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for edt-bridge-mcp@0.45.0 as of 21 h ago. This is the package itself, not its dependencies.