mcp-servers-essential-reference
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is largely a documentation/reference guide and not overtly malicious, but its footprint is unusually broad and includes high-risk MCP integrations for cloud, databases, fintech, trading, and web3. Data flows generally match the stated purpose, and many core packages are official same-org npm packages, but the guide normalizes executing numerous MCP servers via unpinned npx commands and includes third-party/community servers with mixed trust. This is better classified as a medium-risk enablement skill than benign documentation.
Confidence: 89%Severity: 62%
Audit Metadata