skills/specterops/skills/ghostwriter-mcp/Socket

ghostwriter-mcp

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's stated purpose is coherent with Ghostwriter workflows, and the required Ghostwriter credentials are plausible, but it relies on a separate GhostWriterMCP server that is not verifiably sourced or pinned. Because that external server receives the API key and mediates all Ghostwriter access, the overall footprint is too trust-heavy for the documentation provided.

Confidence: 89%Severity: 84%

Audit Metadata

Analyzed At

Sep 4, 2026, 01:17 PM

Package URL

pkg:socket/skills-sh/specterops%2Fskills%2Fghostwriter-mcp%2F@965e229293b0e55217ed97ec7087c09b9ae549cd542e286ede222c8654a476cb