mcp-sentinel

Fail

Audited by Snyk on Jul 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 1.00). Yes — several URLs match high-risk indicators (direct .sh install, raw IP URL, pastebin-style endpoints, and the known-malicious giftshop.club IOC) and are used in the skill's tests/IOCs as exfiltration/install examples.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 23, 2026, 09:51 AM
Issues
1
Security Audit — snyk — mcp-sentinel