tools-mcp-bridges
Warn
Audited by Socket on Oct 15, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill is internally consistent with its stated purpose, but that purpose is inherently high risk: it equips an AI agent with pentesting and exploitation capabilities, including an arbitrary-command terminal bridge. Official Kali apt packages reduce install-trust concern, but the third-party Docker/community MCP options and the offensive tool exposure keep overall security risk high. This looks vulnerable/high-risk rather than malicious.
Confidence: 88%Severity: 78%
Audit Metadata