smartdb-mcp@1.0.0

CAUTION

Publisher claims: "SmartDB is a universal database gateway that implements the Model Context Protocol (MCP) server interface.SmartDB not only provides basic database connection and exploration capabilities but also adds advanced features such as OAuth 2.0 authentication , health checks, SQL optimization, and index health detection, making database management and maintenance more secure and intelligent." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher wenb1n-dev · joined 0 days agoInstalls 48Last detonated 1 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.1sprocessdependency install exit 1

0.1sprocessexec /usr/bin/timeout

0.1sprocessexec .venv/bin/smartdb

0.1sprocessexited 127: timeout: failed to run command '.venv/bin/smartdb': No such file or directory

0.1sclaimedno tools/list reply (exit 127)

0.1sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathssrc/core/server.py:230 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsREADME.md:219 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsREADME.md:251 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/config/dbconfig.py:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/server.py:229 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathssrc/server.py:228 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

File type combined with upload actionsrc/static/login/assets/UserProfile-1ca2b214.js:1 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Access to sensitive file pathssrc/core/server.py:231 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

URL with embedded credentialssrc/static/login/index.html:8 · URL with embedded credentials — may be phishing or credential leaking

AST07

MEDIUM

File type combined with upload actionsrc/static/login/assets/LoginView-85be1458.js:1 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Process kill commandsrc/databases/oracle/oracle_queries.py:156 · Process kill command — agent can terminate processes

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:248 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)README.md:251 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

document.cookie accesssrc/static/login/assets/index-6734ca5b.js:3 · document.cookie access — can steal session cookies

AST07

HIGH

Base64 encoding combined with network callsrc/static/login/assets/index-6734ca5b.js:3 · Base64 encoding combined with network call — potential data exfiltration

AST07