by alexgreensh · MCP Server · ★ 137
That MCP server with 500 downloads. The Claude Code skill someone linked in Discord. The ClawHub extension your OpenClaw agent auto-installed. The npm package Cursor added to your lockfile. The Codex plugin you grabbed from GitHub. Did you vet any of them? Nobody does. The vetting step doesn't exist. 1,184 malicious skills found on ClawHub in one campaign. 36.8% of agent skills have security flaws. You find something useful, you install it. It runs with your credentials, your file access, your session context.
| Stars | 137 |
| Forks | 18 |
| Language | Python |
| Category | MCP Server |
| Quality Score | 68.9702127224776/100 |
| Last Updated | 2026-07-07 |
| Created | 2026-02-27 |
| Platforms | claude-code, codex, mcp, python |
| Est. Tokens | ~18k |
Explore other popular mcp server tools:
repo-forensics is Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.. It is categorized as a MCP Server with 137 GitHub stars.
repo-forensics is primarily written in Python. It covers topics such as agent-security, agent-skill, agent-skills.
You can find installation instructions and usage details in the repo-forensics GitHub repository at github.com/alexgreensh/repo-forensics. The project has 137 stars and 18 forks, indicating an active community.