{"id":"d7ec6ebf226c","status":"done","kind":"auto","source":"pypi","target":"pypi:span-mcp","name":"span-mcp","version":"","verdict":"COULD NOT RUN","top_finding":null,"findings":0,"critical":0,"public":true,"confidence":null,"created_at":"2026-10-26T05:14:14.957556Z","finished_at":"2026-10-26T05:16:34.023598Z","report_url":"https://detonationlabs.com/r/d7ec6ebf226c","progress":[{"phase":"mcp","label":"baseline","status":"ok","duration":48.3,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp"},{"phase":"mcp","label":"time-travel","status":"ok","duration":46.1,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp"},{"phase":"mcp","label":"ci-github","status":"ok","duration":31.7,"new":[],"findings":[],"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp"}],"error":null,"report":{"engine":"detonator 0.5.1","generated":"2026-10-26T05:16:33Z","target":{"name":"span-mcp","sha256":"de441de1c7a0fc02a61b10c705d26075123b4b7688a906c5e60ff7310abbab7b","files":0,"scripts":[],"declared":{},"trigger_hints":[],"source":"pypi:span-mcp","command":"PYTHONPATH=skill/site python3 -c 'import sys; from span.shell.mcp_server import main as _f; sys.exit(_f())'","kind":"mcp"},"verdict":"COULD NOT RUN","observed":{"network":[],"files_written":[],"secrets_read":[],"commands":[],"exfiltration":[]},"findings":[],"exploration":{"runs":[{"phase":"mcp","target":"span-mcp","label":"baseline","status":"ok","duration":48.272,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.tmp && TMPDIR=$PWD/skill/.tmp PIP_NO_CACH...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/site python3 -c 'import sys; from span.s...","flag":"","children":[{"kind":"proc","label":"python3 -c import sys; from span.shell.mcp_server import main as _f;...","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"mcp","target":"span-mcp","label":"time-travel","status":"ok","duration":46.079,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.tmp && TMPDIR=$PWD/skill/.tmp PIP_NO_CACH...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/site python3 -c 'import sys; from span.s...","flag":"","children":[{"kind":"proc","label":"python3 -c import sys; from span.shell.mcp_server import main as _f;...","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}},{"phase":"mcp","target":"span-mcp","label":"ci-github","status":"ok","duration":31.678,"new_signatures":[],"findings":0,"note":"server did not complete the handshake: no response; server crashed: span-mcp: error: the following arguments are required: --data-dir; 0 tool calls; python 3.12, entry point span-mcp","commands":[],"agent_reply":"","graph":{"roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.tmp && TMPDIR=$PWD/skill/.tmp PIP_NO_CACH...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/site python3 -c 'import sys; from span.s...","flag":"","children":[{"kind":"proc","label":"python3 -c import sys; from span.shell.mcp_server import main as _f;...","flag":"","children":[],"hot":false}],"hot":false}],"truncated":0}}],"stopped":"mcp: coverage plateau (2 runs with no new behavior)","model_usage":{"prompt_tokens":0,"completion_tokens":0,"llm_runs":0}},"surface":{},"note":"Observed behavior only. A clean result does not prove a package is safe.","summary":"We could not start this server, so none of its behavior was tested. It said: span-mcp: error: the following arguments are required: --data-dir","recommendation":{"action":"Review","text":"We could not start it, so nothing was tested. Treat it as unverified."},"iocs":{"hosts":[],"ips":[],"sha256":"de441de1c7a0fc02a61b10c705d26075123b4b7688a906c5e60ff7310abbab7b","benign_hosts":[]},"coverage":{"runs":3,"phases":["mcp"],"environments":["baseline","time-travel","ci-github"],"tool_calls":0,"model_runs":0,"stopped":"mcp: coverage plateau (2 runs with no new behavior)"},"tree":{"run":"mcp:baseline","roots":[{"kind":"proc","label":"bash -c mkdir -p skill/.tmp && TMPDIR=$PWD/skill/.tmp PIP_NO_CACH...","flag":"","children":[{"kind":"proc","label":"mkdir -p skill/.tmp","flag":"","children":[],"hot":false},{"kind":"proc","label":"python3 -m pip install -q --no-index","flag":"","children":[{"kind":"proc","label":"lsb_release -a","flag":"","children":[{"kind":"proc","label":"getopt --name lsb_release -o hvidrcas -l","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c1","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:lower:] [:upper:]","flag":"","children":[],"hot":false},{"kind":"proc","label":"cut -c2-","flag":"","children":[],"hot":false},{"kind":"proc","label":"tr [:upper:] [:lower:]","flag":"","children":[],"hot":false,"count":2}],"hot":false},{"kind":"proc","label":"uname -rs","flag":"","children":[],"hot":false}],"hot":false}],"hot":false},{"kind":"proc","label":"bash -c PYTHONPATH=skill/site python3 -c 'import sys; from span.s...","flag":"","children":[{"kind":"proc","label":"python3 -c import sys; from span.shell.mcp_server import main as _f;...","flag":"","children":[],"hot":false}],"hot":false}],"preview":[],"truncated":0},"flow":{"package":{"name":"span-mcp","version":"","files":0,"kind":"mcp"},"install":[],"has_install":false,"run":["PYTHONPATH=skill/site python3 -c 'import sys; from span.shell.mcp_server import main as _f"],"tools":[],"tool_calls":0,"agent_runs":0,"network":[],"secrets":[],"files":[],"has_graph":true},"confidence":""}}