Security Holds
These tools were flagged during review for security concerns that make them unsuitable for recommendation.
Anthropic-Mythos-Desktop-StudioSecurity Hold Source
Security concerns identified during review. Exercise caution.
Claude-Code-Agent-Design-KitSecurity Hold Source
Security concerns identified during review. Exercise caution.
Claude-Zeroclaw-NexusSecurity Hold Source
Security concerns identified during review. Exercise caution.
Rotates between free-tier accounts on multiple AI providers to dodge rate limits that those providers set intentionally. That is a direct violation of the Terms of Service for OpenAI, Anthropic, Google, and every other mainstream API — grounds for account termination, IP bans, and, for commercial use, potential breach-of-contract exposure. Beyond the legal posture, the tool's whole value proposition depends on staying one step ahead of provider enforcement, which means it will break unpredictably and invite anti-abuse scrutiny on any account touching it. If you need more throughput, pay for it; if you are building for clients, this is a liability you do not want in the stack.
Get Shit Done (GSD)Security Hold Source
Security concerns identified during review. Exercise caution.
Mythos-Claude-OrchestratorSecurity Hold Source
Security concerns identified during review. Exercise caution.
NanoBanana-PPT-SkillsSecurity Hold Source
Security concerns identified during review. Exercise caution.
awesome-claude-fable-5-prompt-vaultSecurity Hold Source
Security concerns identified during review. Exercise caution.
blender-mcpSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-autonomous-deploymentSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-batchy-bulkSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-cli-mcp-bridgeSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-opus-dev-workbenchSecurity Hold Source
Security concerns identified during review. Exercise caution.
claude-session-flowSecurity Hold Source
Security concerns identified during review. Exercise caution.
everything-claude-codeSecurity Hold Source
Security concerns identified during review. Exercise caution.
exo-harness-ai-pipelineSecurity Hold Source
Security concerns identified during review. Exercise caution.
fable-opus-desktop-kitSecurity Hold Source
Security concerns identified during review. Exercise caution.
gryffin-calorai-ventusSecurity Hold Source
Security concerns identified during review. Exercise caution.
hewn-forgeSecurity Hold Source
Security concerns identified during review. Exercise caution.
local-ai-code-assistantSecurity Hold Source
Security concerns identified during review. Exercise caution.
mcp-edd-analytics-vantageSecurity Hold Source
Security concerns identified during review. Exercise caution.
multi-agent-architecture-advisorSecurity Hold Source
Security concerns identified during review. Exercise caution.
plan-execute-verify-claude-codeSecurity Hold Source
Security concerns identified during review. Exercise caution.
real-browser-mcpSecurity Hold Source
Connects Claude to your actual Chrome profile — the one logged into your bank, email, CRM, and admin panels. Prompt injection from any page the model reads (an email, a search result, a scraped article) can trigger real actions inside those sessions: sending messages, approving transactions, changing settings, exfiltrating data. There is no sandbox, no per-site scoping, and no meaningful confirmation layer. The blast radius is everything your browser is currently signed into. For a consultant or operator, that is almost never an acceptable trade against the convenience it offers.
Security concerns identified during review. Exercise caution.
strategic-advisor-orchestratorSecurity Hold Source
Security concerns identified during review. Exercise caution.
Exposes on-chain lending, borrowing, swapping, and investing on the Sui blockchain as tools an AI agent can call directly. Blockchain transactions are irreversible — a hallucinated amount, a wrong token address, or a prompt-injected instruction moves real money that no support desk can claw back. Non-custodial framing does not change this; it just means you personally absorb the loss. DeFi protocols themselves also carry smart-contract and oracle risk that most LLMs cannot reason about. Financial actions need human-in-the-loop confirmation and hard spending caps, neither of which this tool enforces.
Scored Below Standard
These tools were catalogued and evaluated, but their latest evaluation scored a grade of D or F — they fell below the catalog's usable tier on the evidence (trust signals, maintenance, community pulse). This is an evidence-based rating, not a security flag. The stated reason for each comes from its evaluation rationale where one was recorded.
@adhdev/mcp-serverGraded D Source
96 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
@browserstack/mcp-serverGraded D Source
145 GitHub stars; contributors unknown; last commit 9d ago; license AGPL-3.0.
@cometix/claude-codeGraded D Source
236 GitHub stars; contributors unknown; last commit 4d ago; license SEE LICENSE IN README.md.
@gonzih/skills-productGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
@motion.page/claude-pluginGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license FSL-1.1-Apache-2.0.
AR Claude Skills (Marketing/Product)Graded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 6 GitHub stars; 2 contributors; last commit 263d ago; license no license.
AutopilotMonitorGraded D Source
37 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 79 GitHub stars; 1 contributors; last commit 124d ago; license no license.
25 GitHub stars; contributors unknown; last commit 0d ago; license no license.
141 GitHub stars; 2 contributors; last commit 75d ago; license no license.
Claude Cowork Desktop CollaboratorGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 36 GitHub stars; 1 contributors; last commit 178d ago; license no license.
Composure Suite (hrconsultnj)Graded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 69 GitHub stars; 1 contributors; last commit 0d ago; license no license.
Data Analytics Skills (31 Skills)Graded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 216 GitHub stars; 1 contributors; last commit 72d ago; license no license.
DingTalk SkillsGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 87 GitHub stars; 1 contributors; last commit 9d ago; license no license.
144 GitHub stars; contributors unknown; last commit 0d ago; license no license.
199 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
Fantastical MCP ConnectorGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
Fivetran MCP ServerGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 21 GitHub stars; 3 contributors; last commit 10d ago; license no license.
GenAI-AgenticAI-From-Zero-to-ProductionGraded D Source
108 GitHub stars; 1 contributors; last commit 76d ago; license no license.
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
187 GitHub stars; contributors unknown; last commit 0d ago; license no license.
30 GitHub stars; 2 contributors; last commit 0d ago; license GPL-3.0.
40 GitHub stars; 5 contributors; last commit 0d ago; license AGPL-3.0.
39 GitHub stars; 1 contributors; last commit 406d ago; license MIT.
274 GitHub stars; contributors unknown; last commit 0d ago; license no license.
Lorn.NovelWriteSkillsGraded D Source
128 GitHub stars; 1 contributors; last commit 3d ago; license no license.
MCP.so — MCP Server RegistryGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
100 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 162 GitHub stars; 2 contributors; last commit 97d ago; license no license.
138 GitHub stars; 2 contributors; last commit 4d ago; license no license.
224 GitHub stars; 2 contributors; last commit 0d ago; license no license.
OpenConstructionEstimate-DDC-CWICRGraded D Source
200 GitHub stars; contributors unknown; last commit 0d ago; license no license.
PR Impact AnalyzerGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
Pace (Wearables MCP)Graded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
281 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
Skills.sh — Agent Skills DirectoryGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
SpawnMail Claude Code SkillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
169 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
Themata-Claude-ScribeGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 118 GitHub stars; 2 contributors; last commit 7d ago; license no license.
VitePress Docs SkillGraded D Source
audit 2026-07-05 stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
26 GitHub stars; 5 contributors; last commit 4d ago; license AGPL-3.0.
Zoom MCP ConnectorGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
85 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
126 GitHub stars; contributors unknown; last commit 0d ago; license no license.
53 GitHub stars; 2 contributors; last commit 2d ago; license AGPL-3.0.
28 GitHub stars; contributors unknown; last commit 0d ago; license no license.
ai-friendly-web-design-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 70 GitHub stars; 1 contributors; last commit 15d ago; license CC-BY-4.0.
ai-literacy-superpowersGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 39 GitHub stars; 2 contributors; last commit 18d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 49 GitHub stars; 2 contributors; last commit 85d ago; license no license.
ai-workspace-archiveGraded D Source
27 GitHub stars; contributors unknown; last commit 0d ago; license no license.
altium-designer-mcpGraded D Source
29 GitHub stars; 5 contributors; last commit 0d ago; license GPL-3.0.
28 GitHub stars; 1 contributors; last commit 3d ago; license GPL-3.0.
252 GitHub stars; contributors unknown; last commit 0d ago; license no license.
67 GitHub stars; contributors unknown; last commit 0d ago; license no license.
autonomous-dev-teamGraded D Source
29 GitHub stars; 3 contributors; last commit 0d ago; license no license.
awesome-llm-observabilityGraded D Source
26 GitHub stars; contributors unknown; last commit 0d ago; license no license.
49 GitHub stars; 2 contributors; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
bettercallclaudeGraded D Source
33 GitHub stars; 3 contributors; last commit 2d ago; license AGPL-3.0.
bruce-doc-converterGraded D Source
56 GitHub stars; 1 contributors; last commit 16d ago; license no license.
109 GitHub stars; contributors unknown; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 17 GitHub stars; 2 contributors; last commit 0d ago; license no license.
cc-gemini-pluginGraded D Source
70 GitHub stars; 2 contributors; last commit 102d ago; license no license.
36 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-brewcodeGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 28 GitHub stars; 1 contributors; last commit 1d ago; license no license.
claude-code-docsGraded D Source
50 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-code-marketing-quickstartGraded D Source
38 GitHub stars; contributors unknown; last commit 0d ago; license no license.
191 GitHub stars; contributors unknown; last commit 0d ago; license no license.
claude-skill-management-consultant-B1Graded D Source
119 GitHub stars; contributors unknown; last commit 0d ago; license no license.
cloud-finops-skillsGraded D Source
44 GitHub stars; 1 contributors; last commit 12d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 15 GitHub stars; 3 contributors; last commit 5d ago; license GPL-2.0.
47 GitHub stars; 5 contributors; last commit 18d ago; license no license.
144 GitHub stars; contributors unknown; last commit 0d ago; license no license.
critical-briefsGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
68 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
dotnet-clean-architecture-skillsGraded D Source
68 GitHub stars; 2 contributors; last commit 12d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 270 GitHub stars; 2 contributors; last commit 5d ago; license AGPL-3.0.
56 GitHub stars; contributors unknown; last commit 0d ago; license no license.
297 GitHub stars; contributors unknown; last commit 0d ago; license no license.
151 GitHub stars; contributors unknown; last commit 0d ago; license no license.
90 GitHub stars; contributors unknown; last commit 0d ago; license no license.
135 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
game-design-skills-bundleGraded D Source
36 GitHub stars; 2 contributors; last commit 29d ago; license no license.
26 GitHub stars; contributors unknown; last commit 0d ago; license no license.
git-workflow-skillGraded D Source
36 GitHub stars; 4 contributors; last commit 1d ago; license no license.
gitea-cli-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license MIT.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 88 GitHub stars; 2 contributors; last commit 46d ago; license no license.
38 GitHub stars; 1 contributors; last commit 1d ago; license AGPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 138 GitHub stars; 1 contributors; last commit 8d ago; license no license.
i18n-ai-translateGraded D Source
99 GitHub stars; contributors unknown; last commit 0d ago; license GPL-3.0.
43 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 49 GitHub stars; 9 contributors; last commit 13d ago; license no license.
joinquant-skillGraded D Source
77 GitHub stars; contributors unknown; last commit 0d ago; license no license.
268 GitHub stars; contributors unknown; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 16 GitHub stars; 3 contributors; last commit 83d ago; license no license.
korean-contractsGraded D Source
47 GitHub stars; 1 contributors; last commit 94d ago; license no license.
34 GitHub stars; 3 contributors; last commit 36d ago; license no license.
linux-phone-portingGraded D Source
46 GitHub stars; contributors unknown; last commit 0d ago; license CC-BY-4.0.
local-mcp-releasesGraded D Source
32 GitHub stars; 4 contributors; last commit 0d ago; license no license.
36 GitHub stars; contributors unknown; last commit 0d ago; license no license.
management-consulting-forgeGraded D Source
52 GitHub stars; contributors unknown; last commit 0d ago; license no license.
many-ppt-skillsGraded D Source
40 GitHub stars; contributors unknown; last commit 0d ago; license no license.
33 GitHub stars; 2 contributors; last commit 0d ago; license AGPL-3.0.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 184 GitHub stars; 1 contributors; last commit 5d ago; license no license.
95 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
133 GitHub stars; contributors unknown; last commit 0d ago; license no license.
29 GitHub stars; 1 contributors; last commit 10d ago; license no license.
nautilus-compassGraded D Source
290 GitHub stars; contributors unknown; last commit 0d ago; license no license.
168 GitHub stars; 3 contributors; last commit 257d ago; license AGPL-3.0.
39 GitHub stars; 1 contributors; last commit 75d ago; license no license.
166 GitHub stars; contributors unknown; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 16d ago; license AGPL-3.0.
open-science-skillsGraded D Source
34 GitHub stars; 1 contributors; last commit 0d ago; license no license.
opencode-plusplusGraded D Source
109 GitHub stars; contributors unknown; last commit 0d ago; license no license.
49 GitHub stars; 5 contributors; last commit 39d ago; license no license.
orionbelt-analyticsGraded D Source
45 GitHub stars; 2 contributors; last commit 4d ago; license no license.
orionbelt-semantic-layerGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 85 GitHub stars; 2 contributors; last commit 5d ago; license no license.
paint-mv-skillsGraded D Source
25 GitHub stars; contributors unknown; last commit 0d ago; license no license.
php-modernization-skillGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 157 GitHub stars; 1 contributors; last commit 4d ago; license AGPL-3.0.
pubnub-mcp-serverGraded D Source
32 GitHub stars; 10 contributors; last commit 3d ago; license no license.
python-office-mcp-serverGraded D Source
28 GitHub stars; contributors unknown; last commit 0d ago; license no license.
28 GitHub stars; 1 contributors; last commit 74d ago; license no license.
remote-swe-agentsGraded D Source
241 GitHub stars; contributors unknown; last commit 0d ago; license MIT-0.
297 GitHub stars; contributors unknown; last commit 0d ago; license no license.
rootnode-skillsGraded D Source
40 GitHub stars; contributors unknown; last commit 0d ago; license no license.
safer-dependenciesGraded D Source
35 GitHub stars; contributors unknown; last commit 1d ago; license no license.
61 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
security-audit-skillGraded D Source
30 GitHub stars; 4 contributors; last commit 0d ago; license no license.
seobuild-onpageGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 237 GitHub stars; 1 contributors; last commit 42d ago; license no license.
28 GitHub stars; 1 contributors; last commit 0d ago; license no license.
52 GitHub stars; contributors unknown; last commit 0d ago; license no license.
skills-standaardenGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 5 GitHub stars; 5 contributors; last commit 1d ago; license EUPL-1.2.
74 GitHub stars; contributors unknown; last commit 0d ago; license Elastic-2.0.
sp500-mcp-serverGraded D Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 106 GitHub stars; 1 contributors; last commit 70d ago; license AGPL-3.0.
176 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
32 GitHub stars; 4 contributors; last commit 20d ago; license no license.
strategic-frameworksGraded F Source
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 0 GitHub stars; contributors unknown; commit recency unknown; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 24 GitHub stars; 1 contributors; last commit 88d ago; license AGPL-3.0.
25 GitHub stars; contributors unknown; last commit 0d ago; license AGPL-3.0.
205 GitHub stars; 2 contributors; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 9 GitHub stars; 2 contributors; last commit 5d ago; license no license.
138 GitHub stars; contributors unknown; last commit 0d ago; license no license.
tradingview-mcpGraded D Source
134 GitHub stars; contributors unknown; last commit 2d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 45 GitHub stars; 1 contributors; last commit 6d ago; license no license.
298 GitHub stars; contributors unknown; last commit 0d ago; license no license.
188 GitHub stars; contributors unknown; last commit 0d ago; license no license.
38 GitHub stars; 3 contributors; last commit 16d ago; license no license.
video-talkcraftGraded D Source
245 GitHub stars; contributors unknown; last commit 0d ago; license no license.
vox-ai-motion-graphics-generatorGraded D Source
123 GitHub stars; contributors unknown; last commit 0d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 262 GitHub stars; 2 contributors; last commit 9d ago; license AGPL-3.0.
32 GitHub stars; 1 contributors; last commit 4d ago; license GPL-3.0.
wsp-wordpress-mcpGraded D Source
26 GitHub stars; contributors unknown; last commit 0d ago; license GPL-2.0.
146 GitHub stars; contributors unknown; last commit 0d ago; license no license.
zap-coding-agentGraded D Source
25 GitHub stars; 1 contributors; last commit 1d ago; license no license.
catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 35 GitHub stars; 2 contributors; last commit 112d ago; license no license.