{"id":"b1c3ef08eea7","status":"done","kind":"auto","source":"github","target":"https://github.com/Repello-AI/mcp-exploit-demo","name":"mcp-exploit-demo","version":"","verdict":"NO MALICIOUS BEHAVIOR OBSERVED","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-25T12:18:31.665187Z","finished_at":"2026-10-25T12:18:36.093196Z","report_url":"https://detonationlabs.com/r/b1c3ef08eea7","progress":[{"phase":"mcp","label":"baseline","status":"ok","duration":0.4,"new":[],"findings":[],"note":"server did not complete the handshake: no response; 0 tool calls"},{"phase":"mcp","label":"time-travel","status":"ok","duration":0.4,"new":[],"findings":[],"note":"server did not complete the handshake: no response; 0 tool calls"},{"phase":"mcp","label":"ci-github","status":"ok","duration":0.4,"new":[],"findings":[],"note":"server did not complete the handshake: no response; 0 tool calls"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-25T12:18:35Z","target":{"name":"repo","sha256":"d9771be562461305b54c06395c85d20203cf6c34ea6684ab4efb768677f05977","files":3,"scripts":["server.py"],"declared":{},"trigger_hints":[],"source":"local:/tmp/detonator-job-qhbheslp/repo","command":"python3 skill/server.py","kind":"mcp"},"verdict":"NO MALICIOUS BEHAVIOR OBSERVED","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"mcp","target":"repo","label":"baseline","status":"ok","duration":0.415,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; 0 tool calls","commands":[],"agent_reply":""},{"phase":"mcp","target":"repo","label":"time-travel","status":"ok","duration":0.419,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; 0 tool calls","commands":[],"agent_reply":""},{"phase":"mcp","target":"repo","label":"ci-github","status":"ok","duration":0.417,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; 0 tool calls","commands":[],"agent_reply":""}],"stopped":"mcp: coverage plateau (2 runs with no new behavior)","model_usage":{"prompt_tokens":0,"completion_tokens":0,"llm_runs":0}},"note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"Nothing malicious or suspicious happened in 3 runs.","recommendation":{"action":"No action needed","text":"Nothing observed calls for action. This is evidence, not a guarantee."},"iocs":{"hosts":[],"ips":[],"sha256":"d9771be562461305b54c06395c85d20203cf6c34ea6684ab4efb768677f05977","benign_hosts":[]},"coverage":{"runs":3,"phases":["mcp"],"environments":["baseline","time-travel","ci-github"],"tool_calls":0,"model_runs":0,"stopped":"mcp: coverage plateau (2 runs with no new behavior)"},"tree":{},"confidence":""}}