public evidence dossier

io.github.sudo-ai-git/mcp-skill-sec

Audit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.

Latest visible observation: 2026-08-30T22:30:41.080Z

Run a preflight Open expert evidence

Identity

namespacegithub · observed 2026-08-27T22:35:10.765189Z

registry statusactive · observed 2026-08-27T22:35:10.765189Z

origin systemsgithub, registry · observed 2026-08-30T22:30:41.080Z

Distribution

repositoryhttps://github.com/sudo-ai-git/mcp-skill-sec · observed 2026-08-28 14:38:10

npm packageUnknown · observed 2026-08-28 14:38:10

PyPI packageUnknown

hosted endpointUnknown

Maintenance and public findings

repository pushedUnknown

repository archivedUnknown · observed 2026-08-28 14:38:10

npm deprecatedUnknown · observed 2026-08-28 14:38:10

OSV package advisoryUnknown · observed 2026-08-28 14:38:10

Hosted liveness

last endpoint observationUnknown

reported MCP revisionUnknown

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.