{"id":"6e979e7c37e6","status":"done","kind":"auto","source":"github","target":"https://github.com/yiheng98/Connor/tree/main/PoCs/payload_exec_PoC/p10","name":"p10","version":"","verdict":"COULD NOT RUN","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-26T10:34:58.621963Z","finished_at":"2026-10-26T10:36:56.671366Z","report_url":"https://detonationlabs.com/r/6e979e7c37e6","progress":[{"phase":"mcp","label":"baseline","status":"ok","duration":35.7,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server."},{"phase":"mcp","label":"time-travel","status":"ok","duration":32.1,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server."},{"phase":"mcp","label":"ci-github","status":"ok","duration":29.8,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server."}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-26T10:36:56Z","target":{"name":"p10","sha256":"d2b3c6f84e5726ff4abc651a5a3d77a652e4e6c4aaefe2ac56c7462b23ca19b6","files":3,"scripts":["main.py"],"declared":{},"trigger_hints":[],"source":"local:/tmp/detonator-job-q9q1n2p3/repo/PoCs/payload_exec_PoC/p10","command":"PYTHONPATH=skill/.detonator/site python3 skill/main.py","kind":"mcp"},"verdict":"COULD NOT RUN","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"mcp","target":"p10","label":"baseline","status":"ok","duration":35.664,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server.mcpserver import MCPServer) and other APIs changed; see the migration guide at https://py.sdk.modelc","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.detonator/tmp && TMPDIR=$PWD/skill/.deton...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.detonator/tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/.detonator/site python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"dpkg-divert --list <skill>/main.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-defaults.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libintl-perl.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-convert-source-map.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-serialize-javascript.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-colors.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/command-not-found.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/packagekit-tools.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-iconv-lite.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-y18n.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/dbus-daemon.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libblockdev-utils3:amd64.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}},{"phase":"mcp","target":"p10","label":"time-travel","status":"ok","duration":32.101,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server.mcpserver import MCPServer) and other APIs changed; see the migration guide at https://py.sdk.modelc","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.detonator/tmp && TMPDIR=$PWD/skill/.deton...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.detonator/tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/.detonator/site python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"dpkg-divert --list <skill>/main.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-defaults.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libintl-perl.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-convert-source-map.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-serialize-javascript.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-colors.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/command-not-found.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/packagekit-tools.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-iconv-lite.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-y18n.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/dbus-daemon.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libblockdev-utils3:amd64.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}},{"phase":"mcp","target":"p10","label":"ci-github","status":"ok","duration":29.777,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server.mcpserver import MCPServer) and other APIs changed; see the migration guide at https://py.sdk.modelc","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.detonator/tmp && TMPDIR=$PWD/skill/.deton...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.detonator/tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/.detonator/site python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"dpkg-divert --list <skill>/main.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-defaults.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libintl-perl.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-convert-source-map.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-serialize-javascript.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-colors.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/command-not-found.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/packagekit-tools.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-iconv-lite.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-y18n.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/dbus-daemon.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libblockdev-utils3:amd64.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"truncated":0}}],"stopped":"mcp: coverage plateau (2 runs with no new behavior)","model_usage":{"prompt_tokens":0,"completion_tokens":0,"llm_runs":0}},"surface":{},"startup":{},"partial_scan":"","note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We could not start this server, so none of its behavior was tested. It said: ModuleNotFoundError: No module named 'mcp.server.fastmcp'. This is mcp 2.x, where FastMCP was renamed to MCPServer (from mcp.server.mcpserver import MCPServer) and other APIs changed","recommendation":{"action":"Review","text":"We could not start it, so nothing was tested. Treat it as unverified."},"iocs":{"hosts":[],"ips":[],"sha256":"d2b3c6f84e5726ff4abc651a5a3d77a652e4e6c4aaefe2ac56c7462b23ca19b6","benign_hosts":[]},"coverage":{"runs":3,"phases":["mcp"],"environments":["baseline","time-travel","ci-github"],"tool_calls":0,"model_runs":0,"stopped":"mcp: coverage plateau (2 runs with no new behavior)"},"tree":{"run":"mcp:baseline","roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.detonator/tmp && TMPDIR=$PWD/skill/.deton...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.detonator/tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/.detonator/site python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"python3 skill/main.py","flag":"","children":[{"kind":"proc","label":"dpkg-divert --list <skill>/main.py","flag":"","children":[],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-defaults.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libintl-perl.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-convert-source-map.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-serialize-javascript.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-colors.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/command-not-found.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/packagekit-tools.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-iconv-lite.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/node-y18n.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/dbus-daemon.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false},{"kind":"proc","label":"fgrep -lxm 1 -- <skill>/main.py /var/lib/dpkg/info/libblockdev-utils3:amd64.list","flag":"","children":[{"kind":"proc","label":"grep -F -lxm 1 -- <skill>/main.py","flag":"","children":[],"hot":false}],"hot":false}],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"p10","version":"","files":3,"kind":"mcp"},"install":[],"has_install":false,"run":["PYTHONPATH=skill/.detonator/site python3 skill/main.py"],"tools":[],"startup":"","partial":"","tool_calls":0,"agent_runs":0,"network":[],"secrets":[],"files":[],"has_graph":true},"confidence":""}}