mcp-servers-essential-reference

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill is largely a documentation/reference guide and not overtly malicious, but its footprint is unusually broad and includes high-risk MCP integrations for cloud, databases, fintech, trading, and web3. Data flows generally match the stated purpose, and many core packages are official same-org npm packages, but the guide normalizes executing numerous MCP servers via unpinned npx commands and includes third-party/community servers with mixed trust. This is better classified as a medium-risk enablement skill than benign documentation.

Confidence: 89%Severity: 62%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:35 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fmcp-servers-essential-reference%2F@9d840fd578d5bb5d91fca3801589a3056b71edc17d6591a9f3f3efdd6f34ed98
Security Audit — socket — mcp-servers-essential-reference