ds-inspection
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: In
stations/station-01-coverage-gaps.md, the skill instructs the user or agent to connect to an external HTTP MCP endpoint (https://design-systems-mcp.southleft.com/mcp) provided by an unverified third party (southleft). - [REMOTE_CODE_EXECUTION]: Adding an untrusted external HTTP MCP server via
claude mcp add --transport http design-systems https://design-systems-mcp.southleft.com/mcpintroduces remote capabilities and tool definitions that can interact with the agent's environment, creating a potential risk of unauthorized data exposure or remote execution depending on the server's implementation.
Audit Metadata