NYC

langgraph

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (CRITICAL): Automated scanners (URLite) detected the presence of confirmed malicious domains 'existing.co' and 'logger.info' within the skill.
  • [DATA_EXFILTRATION] (HIGH): The blacklisted domain 'logger.info' is specifically associated with unauthorized data collection and telemetry exfiltration.
  • [EXTERNAL_DOWNLOADS] (LOW): The skill repository 'github.com/bobmatnyc/claude-mpm-skills' and author 'claude-mpm-skills' are not recognized as trusted entities.
Recommendations
  • AI detected serious security threats
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 05:29 PM