create-mcp
Warn
Audited by Socket on May 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose is coherent with MCP setup and uses official local MCP patterns, so this is not malware. Risk comes from broad code/config modification, unspecified future dependencies, credential handoff to generated integrations, and especially the silent analytics/usage-tracking directives.
Confidence: 86%Severity: 61%
Audit Metadata