github.com/jamf/pppc-utility · master · scanned 2 h ago · 15 config files
15 agent components in jamf/pppc-utility: 14 unvetted.
Components150 MCP servers
High blast radius0credentials, shell or unvetted code
Credentials handed to agents0none seen
Not vetted14of 14 local servers, skills and plugins
| Component | Where | Verdict | Blast radius |
|---|---|---|---|
CLAUDE.mdInstructions · any agent | CLAUDE.md | clean | low
|
speckit-analyzeSkill · Claude Code | .claude/skills/speckit-analyze/SKILL.md | not vetted | low
|
speckit-checklistSkill · Claude Code | .claude/skills/speckit-checklist/SKILL.md | not vetted | low
|
speckit-clarifySkill · Claude Code | .claude/skills/speckit-clarify/SKILL.md | not vetted | low
|
speckit-constitutionSkill · Claude Code | .claude/skills/speckit-constitution/SKILL.md | not vetted | low
|
speckit-git-commitSkill · Claude Code | .claude/skills/speckit-git-commit/SKILL.md | not vetted | low
|
speckit-git-featureSkill · Claude Code | .claude/skills/speckit-git-feature/SKILL.md | not vetted | low
|
speckit-git-initializeSkill · Claude Code | .claude/skills/speckit-git-initialize/SKILL.md | not vetted | low
|
speckit-git-remoteSkill · Claude Code | .claude/skills/speckit-git-remote/SKILL.md | not vetted | low
|
speckit-git-validateSkill · Claude Code | .claude/skills/speckit-git-validate/SKILL.md | not vetted | low
|
speckit-implementSkill · Claude Code | .claude/skills/speckit-implement/SKILL.md | not vetted | low
|
speckit-planSkill · Claude Code | .claude/skills/speckit-plan/SKILL.md | not vetted | low
|
speckit-specifySkill · Claude Code | .claude/skills/speckit-specify/SKILL.md | not vetted | low
|
speckit-tasksSkill · Claude Code | .claude/skills/speckit-tasks/SKILL.md | not vetted | low
|
speckit-taskstoissuesSkill · Claude Code | .claude/skills/speckit-taskstoissues/SKILL.md | not vetted | low
|
What to do about it
- Unvetted means we have no sandbox run for that exact package. Ask your agent to check before installing: claude mcp add killerskills -- npx -y vet-skills mcp
- For a whole organization (every repo and laptop, rescanned daily, with removal across machines), see Discovery for teams.