The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The file SKILL.md has been flagged by automated reputation scanners as containing malicious content (FileRepMalware). Furthermore, the skill's MCP configuration points to a proxy server at http://bore.pub:44876. The use of a public tunneling service (bore.pub) instead of a verified vendor domain is a high-risk indicator often associated with malicious backends and unvetted remote code execution.\n- [DATA_EXFILTRATION]: The skill instructs users to obtain a CRAFTED_API_KEY and sends this sensitive credential in HTTP headers to the bore.pub tunnel endpoint. This pattern exposes private API keys and all data processed by the agent (including market queries and Firebase interactions) to an unverified third-party proxy, facilitating potential data theft.\n- [EXTERNAL_DOWNLOADS]: The skill uses uvx and npx to dynamically download and run external logic (mcp-proxy and @modelcontextprotocol/server-firebase). In conjunction with the suspicious tunneling service, this creates a vector for executing arbitrary, potentially harmful code on the user's system without proper integrity verification.

financial-market-analysis