Aguara Watch

AAws Kb Retrieval ServerAn MCP server implementation for retrieving information from the AWS Knowledge Base using the Bedrock Agent Runtime.

mcp-so:aws-kb-retrieval-server_modelcontextprotocol

View source
B
84/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

4

Score

84/100

MEDIUM 2
LOW 2

Findings (4)

MEDIUM
Benign heading "'@openai/agents:*'\n;\n// Verbose logging\n..." followed by dangerous content (category: credential_access)
L18

Benign heading "'@openai/agents:*'\n;\n// Verbose logging\n..." followed by dangerous content (category: credential_access)

knowledge-base
An MCP server implementation for retrieving information from the AWS Knowledge Base using the Bedrock Agent Runtime.
Overview
Tools
Comments
Overview
what is AWS Knowledge Base Retrieva...
FIX

Ensure section headings accurately reflect the content that follows. Remove headings that could mislead an LLM into treating content differently than intended.

FP?

Likely FP if the heading mismatch is due to inconsistent markdown formatting or a benign section title that happens to contain keywords like system or config.

MEDIUM
Auto-confirm flag bypassing user verification
L53

Detects -y, --yes, or --auto-approve flags in MCP/skill install commands that bypass user confirmation

"-y"
FIX

Remove the -y/--yes auto-confirm flag from MCP server launch arguments. This flag bypasses user confirmation prompts and allows unattended execution of potentially dangerous operations.

FP?

Likely FP if the matched text is an isolated flag (-y or --yes) in documentation describing command-line options, not in an actual MCP config.

LOW
npx MCP server without version pin
L51

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"
FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.

LOW
Hardcoded secrets in MCP env block
L56

Detects hardcoded API keys, tokens, or passwords in MCP server environment configuration

"env": { + "AWS_SECRET_ACCESS_KEY": "YOUR_SECRET_ACCESS_KEY_HERE"
FIX

Remove shell metacharacters (semicolons, pipes, ampersands, backticks) from MCP server arguments. Use explicit argument arrays and avoid shell expansion in MCP configurations.

FP?

Likely FP if the metacharacter is a literal part of a non-shell argument (e.g., a regex pattern or a URL query parameter containing ampersands).