pentester-mcp-security-tools

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The installation instructs to git clone https://github.com/halilkirazkaya/pentester-mcp.git and then build/run the server (docker compose / server.py), so remote repository code is fetched and executed as a required dependency and thus can directly control the agent/tool behavior.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs running the server with sudo and adding a sudoers entry (echo ... | sudo tee /etc/sudoers.d/pentester), which requests elevated privileges and modifies system files on the host.