https://clawhub.ai/api/v1/skills/mcp-tool-integrator/file?path=SKILL.md&version=4.0.1
github.com/clawhub.ai/mcp-tool-integrator
Scanned Thu, 28 May 2026 15:58:15 GMT
Scan ID crawl-a1zihblmir2i9xko23vfw13v · 5ms
F
SCORE 0 / 100
Verdict: Do not install
2 critical findings.
This skill exfiltrates environment secrets (${GITHUB_TOKEN}) plus 2 other issues listed below.
2 critical0 high1 medium9 rules passed
Why grade F?
score · 0 / 100The current grade reflects 2 critical findings (any 2+ CRITs → F).
2 CRIT0 HIGH1 MED0 LOW
To reach a higher grade
- DReach Dtarget score 30
Resolve 1 of your 2 CRIT findings — any single CRIT still keeps you at D.
- CReach Ctarget score 55
Resolve all 2 CRIT findings.
- BReach Btarget score 75
Resolve all 2 CRIT.
- AReach Atarget score 95
Resolve all 2 CRIT.
Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.
Findings · ordered by severity
critSkill references secret env var ${GITHUB_TOKEN}The skill instructions reference `${GITHUB_TOKEN}`, which contains a credential. If an attacker can lure the agent into including this in an outbound URL or message, the credential leaks.▾
Skill references secret env var ${GITHUB_TOKEN}
The skill instructions reference `${GITHUB_TOKEN}`, which contains a credential. If an attacker can lure the agent into including this in an outbound URL or message, the credential leaks.
182 "args": ["-y", "@modelcontextprotocol/server-github"],
183 "env": {
184 "GITHUB_TOKEN": "${GITHUB_TOKEN}"← references ${GITHUB_TOKEN} — potential credential leak
185 }
186 },
critSkill references secret env var ${DATABASE_URL}The skill instructions reference `${DATABASE_URL}`, which contains a credential. If an attacker can lure the agent into including this in an outbound URL or message, the credential leaks.▾
Skill references secret env var ${DATABASE_URL}
The skill instructions reference `${DATABASE_URL}`, which contains a credential. If an attacker can lure the agent into including this in an outbound URL or message, the credential leaks.
189 "args": ["-y", "@modelcontextprotocol/server-postgres"],
190 "env": {
191 "DATABASE_URL": "${DATABASE_URL}"← references ${DATABASE_URL} — potential credential leak
192 }
193 }
medNo capability manifest declaredThe skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.rule: no-manifest▾
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule:
no-manifestskillox.io/r/crawl-a1zihblmir2i9xko23vfw13v