Skills/PyPI/heronintelligence-mcp

heronintelligence-mcp@1.11.0

CAUTION

Publisher claims: "Heron Intelligence — MCP server for AI assistants" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher heron-intelligence · joined 0 days agoInstalls 1,002Last detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.2sprocessdependency install exit 1

0.3sprocessexec /usr/bin/timeout

0.3sprocessexec .venv/bin/heronintelligence-mcp

0.3sprocessexited 127: timeout: failed to run command '.venv/bin/heronintelligence-mcp': No such file or directory

0.3sclaimedno tools/list reply (exit 127)

0.3sprocessscript backend runs setup only

Static findings

CRITICAL

Destructive file system command detectedDockerfile:7 · Destructive file system command detected

AST05

HIGH

File permission modification commandDockerfile:33 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Outbound HTTP to raw IP addresstests/test_consent_page.py:477 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Prompting user to enter sensitive credentialsheronintelligence_mcp/consent_page.py:292 · Prompting user to enter sensitive credentials — social engineering

AST03

MEDIUM

URL using raw IP addresstests/test_consent_page.py:477 · URL using raw IP address — may bypass domain-based filtering

AST07