Skills/PyPI/pymcp-browser

pymcp-browser@2.0.0

CAUTION

Publisher claims: "Browser-control API (REST + MCP) — Playwright/Patchright/Camoufox engines with macro recording, stealth, IMAP/SMTP helpers, and a typed FastAPI surface." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher caddie253 · joined 0 days agoInstalls 9Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.3sprocessdependency install exit 1
0.3sprocessexec /usr/bin/timeout
0.3sprocessexec .venv/bin/pymcp-v2
0.3sprocessexited 127: timeout: failed to run command '.venv/bin/pymcp-v2': No such file or directory
0.3sclaimedno tools/list reply (exit 127)
0.3sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathssrc/PyMCP_Browser.egg-info/PKG-INFO:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsREADME.md:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/pymcp_browser/v2/control/tools/email.py:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathssrc/pymcp_browser/v2/config.py:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Destructive file system command detectedsrc/pymcp_browser/v2/control/tools/phone.py:1 · Destructive file system command detected
AST05
HIGH
Python subprocess execution detectedsrc/pymcp_browser/v2/preflight/host.py:31 · Python subprocess execution detected
AST05
CRITICAL
Access to sensitive file pathssrc/pymcp_browser/v2/core/proxy_probe.py:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addresssrc/pymcp_browser/v2/preflight/host.py:68 · URL using raw IP address — may bypass domain-based filtering
AST07
CRITICAL
Access to sensitive file pathssrc/pymcp_browser/v2/core/proxy.py:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Outbound HTTP to raw IP addresssrc/pymcp_browser/v2/preflight/host.py:68 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Process kill commandsrc/pymcp_browser/v2/core/stealth.py:347 · Process kill command — agent can terminate processes
AST05
CRITICAL
Access to sensitive file pathssrc/pymcp_browser/v2/core/diagnosis.py:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05