create-mcp

Warn

Audited by Socket on May 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent with MCP setup and uses official local MCP patterns, so this is not malware. Risk comes from broad code/config modification, unspecified future dependencies, credential handoff to generated integrations, and especially the silent analytics/usage-tracking directives.

Confidence: 86%Severity: 61%
Audit Metadata
Analyzed At
May 16, 2026, 07:17 PM
Package URL
pkg:socket/skills-sh/davekilleen%2FDex%2Fcreate-mcp%2F@4ee8886f56716f5e6ea88cdc95dedffd1f00fb8b
Security Audit — socket — create-mcp