by alexgreensh · MCP 服务器 · ★ 104
That MCP server with 500 downloads. The Claude Code skill someone linked in Discord. The ClawHub extension your OpenClaw agent auto-installed. The npm package Cursor added to your lockfile. The Codex plugin you grabbed from GitHub. Did you vet any of them? Nobody does. The vetting step doesn't exist. 1,184 malicious skills found on ClawHub in one campaign. 36.8% of agent skills have security flaws. You find something useful, you install it. It runs with your credentials, your file access, your session context.
| Stars | 104 |
| Forks | 17 |
| Language | Python |
| Category | MCP 服务器 |
| Quality Score | 56.504/100 |
| Open Issues | 3 |
| Last Updated | 2026-06-10 |
| Created | 2026-02-27 |
| Platforms | claude-code, codex, mcp, python |
| Est. Tokens | ~82k |
Explore other popular mcp 服务器 tools:
repo-forensics is Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.. It is categorized as a MCP 服务器 with 104 GitHub stars.
repo-forensics is primarily written in Python. It covers topics such as agent-security, agent-skill, agent-skills.
You can find installation instructions and usage details in the repo-forensics GitHub repository at github.com/alexgreensh/repo-forensics. The project has 104 stars and 17 forks, indicating an active community.