netdata-mcp-integration

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs using sudo to read the Netdata MCP bearer token (and embeds a sudo-backed curl example) and also tells the agent to restart the agent and may invoke execute_function that can restart services or kill processes, which directs the agent to perform privileged, state-modifying actions on the host.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 11:23 AM
Issues
1
Security Audit — snyk — netdata-mcp-integration