{"id":"urn:awr:mtl:1:recordset:argus-warden-builtin","package":"@aimarket/warden@0.16.0","note":"The built-in deny-list floor of the published package named above, pinned by digest. No remote feed is loaded: WARDEN's feed has no maximum age, so a remote snapshot could be replayed to make newer records disappear (MTL/1 section 7.5). HISTOR matches these records against a server's registry name and endpoint only — never its tool definitions — and does not state that the set was current when a label was issued.","records":[{"pattern":"*~/.ssh*","severity":"critical","code":"THREAT_SSH_KEY_READ","reason":"Server references the user's SSH key directory.","source":"builtin","scope":"any"},{"pattern":"*id_rsa*","severity":"critical","code":"THREAT_SSH_KEY_READ","reason":"Server references a private SSH key file.","source":"builtin","scope":"any"},{"pattern":"*rm -rf*","severity":"critical","code":"THREAT_DESTRUCTIVE_CMD","reason":"Server command performs a destructive recursive delete.","source":"builtin","scope":"server"},{"pattern":"*:(){ :|:&};:*","severity":"critical","code":"THREAT_FORK_BOMB","reason":"Server command contains a shell fork bomb.","source":"builtin","scope":"server"},{"pattern":"*drain*wallet*","severity":"critical","code":"THREAT_CRYPTO_DRAINER","reason":"Crypto-drainer keyword in server identity.","source":"builtin","scope":"any"},{"pattern":"*seed*phrase*","severity":"high","code":"THREAT_SEED_PHRASE","reason":"Server references wallet seed phrases.","source":"builtin","scope":"any"},{"pattern":"*sweep*funds*","severity":"critical","code":"THREAT_CRYPTO_DRAINER","reason":"Crypto-drainer keyword in server identity.","source":"builtin","scope":"any"},{"pattern":"*.env*exfil*","severity":"critical","code":"THREAT_ENV_EXFIL","reason":"Server references exfiltrating environment files.","source":"builtin","scope":"any"},{"pattern":"*offical-mcp*","severity":"high","code":"THREAT_TYPOSQUAT","reason":"Typosquat of an official MCP server name.","source":"builtin","scope":"server"},{"pattern":"*modelcontextprotocoll*","severity":"high","code":"THREAT_TYPOSQUAT","reason":"Typosquat of modelcontextprotocol.","source":"builtin","scope":"server"},{"pattern":"*filesytem*","severity":"medium","code":"THREAT_TYPOSQUAT","reason":"Typosquat of the filesystem reference server.","source":"builtin","scope":"server"}]}