MCP server community
Risk level
high
75/100

kubernetes

kubernetes is a community-maintained MCP server from Flux159. Anomity scores its risk at 75 out of 100 (high). It matches 1 dangerous capability combination.

network:outbound shell:execute credentials:access

Analysis summary

kubernetes is a community-maintained MCP server from Flux159. Anomity scores its risk at 75 out of 100 (high). It matches 1 dangerous capability combination.

Why this entry scored 75 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. Declared high-risk capabilities add +20 (capped at +30). It matches 1 dangerous capability combination, which contributes additional severity weight. The clamped result is 75, placing it in the high band.

See the full scoring formula →

Findings

  • Established community project Trust offset
    Contribution to score: -10
  • 2 high-risk capabilities: shell:execute, credentials:access Critical
    Contribution to score: +20
  • Data exfiltration risk (high) High
    Evidence
    Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.
    Contribution to score: +15

Capabilities

Every capability the entry declares, with the security implication of each.

  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.
  • shell:execute Shell execution
    Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell.
  • credentials:access Credentials access
    Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment.

Dangerous combinations matched

Capability pairings that compound into well-known attack patterns.

  • Data exfiltration risk high
    Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.
    shell:execute network:outbound