Demo verdict. This skill and its findings are illustrative data from our product demo, not a real detonation. Real verdicts are on the leaderboard.
github/github-mcp@2.0.3
VERIFIEDVerified PublisherPublisher claims: "Official GitHub MCP server." Observed in sandbox:
Registry Anthropic partner directoryPublisher github · verified orgInstalls 3.1MLast detonated 25d ago
Is github/[email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (3 scenarios) on 2026-10-02 and scored it 97/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. The publisher is verified.
Behavior trace
Queued for honeypot run · static analysis onlyt+CategoryObserved action
This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
No findings across 2,114 lines in 9 files.