smalltv-mcp-tools

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are internally consistent for SmallTV device management, and its data flows appear local and proportionate. However, it relies on an external local MCP server/toolchain whose provenance is not established in the skill, and that required executable plus hardware-control actions (including firmware flashing) make the security risk high despite low evidence of overt malware.

Confidence: 84%Severity: 78%
Audit Metadata
Analyzed At
Aug 1, 2026, 09:06 PM
Package URL
pkg:socket/skills-sh/yaniv-golan%2Fsmalltv-ultra-skill%2Fsmalltv-mcp-tools%2F@a72a93b9745835981c1296808eaf8e79b3334ee7229c6da8d6cc72087a8a2cbe
Security Audit — socket — smalltv-mcp-tools