skills/noe-varner/noeai-free-resources/install-kie-mcp/Socket

install-kie-mcp

Warn

Audited by Socket on Jul 30, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but its actual trust model is weak. It installs and executes a bundled, non-officially-verified MCP server, forwards the user's API key to that code, and stores the key in plaintext in project config. This looks more like a risky third-party installer than confirmed malware.

Confidence: 87%Severity: 78%

Audit Metadata

Analyzed At

Jul 30, 2026, 03:52 PM

Package URL

pkg:socket/skills-sh/noe-varner%2Fnoeai-free-resources%2Finstall-kie-mcp%2F@e2f6ff30a67ef5ad6b818ca89276ce1746e8873d25f8399ecf63da36225bd036