touchdesigner-mcp

SUSPICIOUS. The skill’s capabilities mostly match its TouchDesigner-control purpose, and the documented network flow is local-only, but it installs an unverifiable .tox artifact from a vendor website and then grants broad local execution through an unauthenticated MCP service plus arbitrary Python execution. This looks more like a high-risk local integration than overt malware.

No direct malicious logic (exfiltration, backdoor, reverse shell, or credential theft) is evident in this script. The primary risk is supply-chain trust: it downloads a twozero.tox artifact from a fixed external URL without checksum/signature verification, meaning a compromised or substituted artifact could introduce malicious behavior when later used by TouchDesigner/Hermes. Strengthen by pinning the expected hash/signature and validating after download before writing/using the artifact.