qavanin-mcp@0.2.1
CAUTION· not startedPublisher claims: "Unofficial read-only MCP server for qavanin.ir: search Iranian laws and regulations, read their full text, amendments and status." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher sepehr071 · publishing for 42 daysInstalls 0Last detonated 3d ago
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
- It will ask for
- no credential variables read in the code
- Where it talks to
- qavanin.ir (its own)
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable and talks to qavanin.ir, its own; the guard pins the network to what the honeypot saw and logs every call.
$vet-skills run --net declared -- uvx qavanin-mcp
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-11 and scored it 77/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Collapsed <details> block carrying instructions; Hidden zero-width characters detected. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run
Static findings
MEDIUM
document.cookie accesstests/fixtures/arvan_challenge.html:46 · document.cookie access — can steal session cookies
AST07document.cookie = '__arcsjsc=' + encodeURIComponent(hash) + '; Max-Age=100; Path=/; Domain=' + encodeURIComponent('qavanin.ir') + '';Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_sectionstatus.html:9 · Excessive HTML entities detected — may be obfuscating content
AST07…llbar1 " > <div class="Box1"> <b>وضعیت :</b> 5 <b>نوع وضعیت :</b> اصلاحي <b>اثرگذار :</b> <a href="/Law/TreeText/?IDS=6623702055317218729" target="_bla…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_relatedindex_excerpt.html:10 · Excessive HTML entities detected — may be obfuscating content
AST07…idth=device-width, initial-scale=1.0"> <meta name="description"> <title>قوانین و مقررات مرتب…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/search_results.html:15 · Excessive HTML entities detected — may be obfuscating content
AST07<a class="white" href="/?sortOrder=ApproveDate_inc">تاریخ تصویب</a>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_statusindex.html:87 · Excessive HTML entities detected — may be obfuscating content
AST07<h1 class='mytitle Titr font18 text-center w100 padding-top20p' >قانون مدني</h1>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_attribute_civil.html:10 · Excessive HTML entities detected — may be obfuscating content
AST07<title>مشخصات تصویب قانون مدني</title>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_treetext_civil_excerpt.html:9 · Excessive HTML entities detected — may be obfuscating content
AST07…initial-scale=1.0"> <meta name="description" content="متن تنقیح شده و موضوعی ق…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/law_sectionstatus.html:13 · Hidden zero-width characters detected — may conceal content
AST07…دل قرآن، در پي انقلاب اسلامي پيروزمند خود به رهبري مرجع عاليقدر تقليد آيت الله العظمي امام خميني، در همه پرسي دهم و يازدهم فروردين ماه يكهزار و …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_attribute_civil.html:100 · Excessive HTML entities detected — may be obfuscating content
AST07<a href="/Law/Attribute/?IDS=12021850837713548188" >اطلاعات پایه</a>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_relatedindex_excerpt.html:86 · Excessive HTML entities detected — may be obfuscating content
AST07<h1 class='mytitle Titr font18 text-center w100 padding-top20p' >قانون مدني</h1>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
document.cookie accesstests/fixtures/arvan_challenge.html:45 · document.cookie access — can steal session cookies
AST07document.cookie = '__arcsjs=' + encodeURIComponent(hash_v1) + '; Max-Age=100; Path=/; Domain=' + encodeURIComponent('qavanin.ir') + '';Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.HIGH
Collapsed <details> block carrying instructionsREADME.md:137 · Collapsed <details> block carrying instructions
AST01<summary><b>Anything else</b></summary> It's a standard stdio MCP server: run `uvx qavanin-mcp`, or `pip install qavanin-mcp` and run `qavanin-mcp`.Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_treetext_vote.html:9 · Excessive HTML entities detected — may be obfuscating content
AST07…initial-scale=1.0"> <meta name="description" content="متن تنقیح شده و موضوعی ر…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/search_results.html:59 · Hidden zero-width characters detected — may conceal content
AST07… background-DarkBlue'>ماليات</span>ي كشور در خصوص حذف عبارت به استثناء انواع شيرهاي طعم دار از كليه مكاتبات و فهرست هاي مصاديق كالاها و خدمات معاف موضوع قوانين…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.HIGH
Hidden zero-width characters detectedsrc/qavanin_mcp/search.py:50 · Hidden zero-width characters detected — may conceal content
AST07120: "بخشنامههای قوه قضائیه",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/law_treetext_civil_excerpt.html:348 · Hidden zero-width characters detected — may conceal content
AST07… target=_blank>نظر معاونت حقوقي رياست جمهوري درخصوص امكان اجراي قانون جامع خدمات رساني به ايثارگران تا پيش از تنظيم آيين نامه هاي مربوطه و تأمين اعتبار</a><a …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_attribute_regulation.html:10 · Excessive HTML entities detected — may be obfuscating content
AST07…idth=device-width, initial-scale=1.0"> <meta name="description"> <title>مشخصات تصویب اصلاح ج…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/search_results.html:31 · Hidden zero-width characters detected — may conceal content
AST07…د مواد 87، 242 و 243 قانون <span class='white background-DarkBlue'>ماليات</span>هاي مستقيم</a> </td> …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/search_results.html:45 · Hidden zero-width characters detected — may conceal content
AST07…راي تبصره ماده (100) قانون <span class='white background-DarkBlue'>ماليات</span>هاي مستقيم اصلاحي مصوب 1394/04/31 </a> </td…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Excessive HTML entities detectedtests/fixtures/search_empty.html:32 · Excessive HTML entities detected — may be obfuscating content
AST07…field is required." id="PageNumber" name="PageNumber"><option value="1"><<اول</option> </select> از 0 </td> …Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_treetext_circular.html:9 · Excessive HTML entities detected — may be obfuscating content
AST07…initial-scale=1.0"> <meta name="description" content="متن تنقیح شده و موضوعی ب…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_statusindex.html:101 · Excessive HTML entities detected — may be obfuscating content
AST07<a href="/Law/Attribute/?IDS=12021850837713548188" >اطلاعات پایه</a>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/search_empty.html:15 · Excessive HTML entities detected — may be obfuscating content
AST07<a class="white" href="/?sortOrder=ApproveDate_inc">تاریخ تصویب</a>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Hidden zero-width characters detectedtests/fixtures/law_statusindex.html:611 · Hidden zero-width characters detected — may conceal content
AST07…دل قرآن، در پي انقلاب اسلامي پيروزمند خود به رهبري مرجع عاليقدر تقليد آيت الله العظمي امام خميني، در همه پرسي دهم و يازدهم فروردين ماه يكهزار و …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Hidden zero-width characters detectedtests/fixtures/law_treetext_civil_excerpt.html:350 · Hidden zero-width characters detected — may conceal content
AST07…ت بماقبل خود اثر ندارد مگر اينكه در خود قانون، مقررات خاصي نسبت باين موضوع اتخاذ شده باشد.</p> <!-- ...trimmed... --> Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_attribute_civil.html:86 · Excessive HTML entities detected — may be obfuscating content
AST07<h1 class='mytitle Titr font18 text-center w100 padding-top20p' >قانون مدني</h1>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/law_statusindex.html:10 · Excessive HTML entities detected — may be obfuscating content
AST07<title>وضعیت های تنقیحی قانون مدني</title>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/search_results.html:37 · Excessive HTML entities detected — may be obfuscating content
AST07سازمان امور مالياتي </td>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.MEDIUM
Excessive HTML entities detectedtests/fixtures/search_results.html:51 · Excessive HTML entities detected — may be obfuscating content
AST07سازمان امور مالياتي </td>Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.Cost to the agent
Instructions loaded
≈68 tok
1 file · 32 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for qavanin-mcp@0.2.1 as of 3d ago. This is the package itself, not its dependencies.
What would make this Verified
3 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim sepehr071: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
- Hidden instructions≈ +6 on the totalRemove HTML comments, zero-width characters and white-on-white text that carry instructions. Everything the agent is meant to read should be visible to the person reading the file.
- document.cookie access≈ +2 on the totalReplace encoded or assembled strings with plain literals and remove undeclared network calls.
- Excessive HTML entities detected≈ +2 on the totalPut hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
- Hidden zero-width characters detected≈ +2 on the totalKeep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
Publish a new version to PyPI, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim sepehr071Propose a patch to the maintainer