mcp_server_developer

Warn

Audited by Socket on Feb 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Overall, the skill manifest is coherent with its stated purpose of guiding MCP server development for Claude Desktop integration. It outlines plausible architecture, endpoints, telemetry, and NPX distribution workflows. However, explicit user consent for telemetry, strict dependency pinning/audits, and secure CI/CD practices are critical to prevent supply-chain and privacy risks. Treat as SUSPICIOUS-leaning toward BENIGN pending secure implementation details, with emphasis on ensuring consent flows, verified dependencies, and audited telemetry endpoints.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 27, 2026, 10:57 PM
Package URL
pkg:socket/skills-sh/vuralserhat86%2Fantigravity-agentic-skills%2Fmcp-server-developer%2F@4d39420b0c3878e98de4de416ab03d65c36c451d