awesome-mcp-servers-discovery
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s stated purpose is coherent as an MCP discovery guide, but it expands into recommending installation and execution of numerous third-party MCP servers and helper CLIs from a broad community ecosystem. There is no direct malware behavior, covert exfiltration, or pre-execution payload, yet the supply-chain and credential-forwarding surface is materially larger than a simple discovery skill and some data may flow to third-party vendor endpoints.
Confidence: 88%Severity: 62%
Audit Metadata