exewatchmcp@0.1.7

CAUTION

Publisher claims: "Let your AI agent fix the bugs your users hit. An MCP server that gives Claude Code, Codex and KAI (RAD Studio) the errors, slow operations, metrics and versions your apps report to ExeWatch, so they can find the cause in your code and fix it." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher pypi · joined 0 days agoInstalls 0Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.2sprocessdependency install exit 1

0.2sprocessexec /usr/bin/timeout

0.2sprocessexec .venv/bin/exewatch-mcp

0.2sprocessexited 127: timeout: failed to run command '.venv/bin/exewatch-mcp': No such file or directory

0.2sclaimedno tools/list reply (exit 127)

0.3sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addresstests/test_commands.py:100 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsexewatch_cli/main.py:253 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsexewatch_cli/main.py:252 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addresstests/test_commands.py:100 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_review_fixes.py:148 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Python subprocess execution detectedtests/test_mcp.py:159 · Python subprocess execution detected

AST05

CRITICAL

Access to sensitive file pathsexewatch_cli/main.py:186 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionREADME.md:72 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_review_fixes.py:159 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionExeWatchMCP.egg-info/PKG-INFO:92 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addresstests/test_client.py:57 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_review_fixes.py:135 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_client.py:57 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addresstests/test_review_fixes.py:203 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionPKG-INFO:92 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

Access to sensitive file pathsexewatch_cli/main.py:262 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

URL using raw IP addresstests/test_review_fixes.py:159 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresstests/test_review_fixes.py:135 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresstests/test_review_fixes.py:203 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addresstests/test_review_fixes.py:148 · URL using raw IP address — may bypass domain-based filtering

AST07