darknet-mcp-server-threat-intelligence

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). These URLs are suspicious because the list contains multiple .onion dark‑web forum/market endpoints, phishing-looking domains, a direct .exe download, and an unknown GitHub repo — all high‑risk indicators for malware distribution (only check.torproject.org and ara.so look benign).

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill aggregates and exposes stolen-credential sources (stealer logs, paste/breach searches), explicit stealer query tools, exploit code lookups, and Tor scraping capabilities—features that strongly enable credential theft, data exfiltration, and system compromise even if presented as "threat intel"; no hidden backdoor/RCE or obfuscated payloads were found in the provided documentation.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime tools (e.g., tor_fetch_onion, tor_scrape_onion, tor_search_onion) can ingest arbitrary outsider-authored HTML/text from user-supplied .onion URLs into the agent context (via returned content/text/snippet).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). High-confidence: the skill instructs running the MCP server via npx (which fetches and executes the published package at runtime) and provides a git clone URL (https://github.com/badchars/darknet-mcp-server.git) used to fetch remote code that is then executed (bun run / npx), so the skill relies on externally fetched code that will execute at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes explicit installation and Tor setup commands that use sudo and systemctl (e.g., "sudo apt install tor", "sudo systemctl start/enable tor"), which instruct modifying system services and require elevated privileges.