awesome-mcp-servers-discovery

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is coherent as an MCP discovery guide, but it expands into recommending installation and execution of numerous third-party MCP servers and helper CLIs from a broad community ecosystem. There is no direct malware behavior, covert exfiltration, or pre-execution payload, yet the supply-chain and credential-forwarding surface is materially larger than a simple discovery skill and some data may flow to third-party vendor endpoints.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:32 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fawesome-mcp-servers-discovery%2F@71107fc338b2207832b7f93dedae9e17a14436b6e148de4c69da662a54cf8a01
Security Audit — socket — awesome-mcp-servers-discovery