native-devtools-mcp-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are coherent for a local automation MCP server, and install sources look normal. The main risk is the breadth of local control plus explicit wildcard auto-approval, which can let the agent take high-impact actions across apps, browsers, and devices without per-action review.

Confidence: 89%Severity: 74%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:46 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdevtools-skills%2Fnative-devtools-mcp-automation%2F@fdbc1e8de7cb0a752dcadfe2fcda7d9094bf72fe4b4de9b9de49b2f21936a942