connect-mcps

Warn

Audited by Socket on Jun 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s main behavior matches its stated purpose, and official Claude Code/first-party MCP setup is plausible. However, it mixes web-sourced instructions, credential collection, optional community MCP discovery, broad workspace rewrites, and enables future autonomous external actions, so the overall footprint is higher risk than a simple documentation/setup helper.

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 16, 2026, 01:00 AM
Package URL
pkg:socket/skills-sh/coalesce-labs%2Fcatalyst%2Fconnect-mcps%2F@eb77f58d1bf351e6ba22f2bcde26f9c2e8ff1cec2a175950915c434b741b165c
Security Audit — socket — connect-mcps