Skills/PyPI/mseep-maverick-mcp

mseep-maverick-mcp@0.1.0

CAUTION· install only

Publisher claims: "Personal-use MCP server for Claude Desktop providing professional-grade stock analysis and technical indicators" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher mseep-support · publishing for 578 daysInstalls 12Last detonated 2d ago
What would fix thisWatchDispute verdict

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
AUTH_ENABLEDDATABASE_URLEXA_API_KEYMCP_DATABASE_URLREDIS_PASSWORDTAVILY_API_KEYTIINGO_API_KEYTIINGO_API_TOKENConfiguration, not credentials: CACHE_ENABLED, CACHE_VERSION, DB_ECHO, DB_POOL_PRE_PING, DB_POOL_RECYCLE, DB_USE_POOLING, ENVIRONMENT, GITHUB_ACTIONS, POSTGRES_URL, REDIS_DB, REDIS_HOST, REDIS_PORT, REDIS_SSL, SKIP_VALIDATION, SP500_CACHE_FILE, SP500_SYMBOLS_FILE, STARTUP_MODE, TIINGO_BASE_URL, TIINGO_CHECKPOINT_FILE, TIINGO_MAX_CONCURRENT, TIINGO_RATE_LIMIT, TIINGO_TIMEOUT
Where it talks to
no vendor host named in the codeAlso tiingo.com, astral.sh — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
use of the skill by an agent

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names tiingo.com, astral.sh as well as its own vendor. The guard injects AUTH_ENABLED, DATABASE_URL, EXA_API_KEY, MCP_DATABASE_URL, REDIS_PASSWORD, TAVILY_API_KEY, TIINGO_API_KEY, TIINGO_API_TOKEN only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- uvx mseep-maverick-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-12 and scored it 72/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Pipe-to-shell pattern; Access to sensitive file paths; Access to sensitive file paths. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessexited 1: SyntaxError: unmatched ')'
0.0sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexited 1: SyntaxError: unmatched ')'

Static findings

CRITICAL
Pipe-to-shell patternscripts/dev.sh:66 · Pipe-to-shell pattern — downloads and immediately executes remote codeecho -e "${RED}uv not found! Please install uv: curl -LsSf https://astral.sh/uv/install.sh | sh${NC}"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST06
HIGH
Access to sensitive file pathsscripts/dev.sh:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Source .env if it existsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandscripts/dev.sh:45 · Process kill command — agent can terminate processeskill $BACKEND_PID 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsscripts/dev.sh:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f .env ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathsMakefile:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "Created .env file - please update with your configuration"; \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files4. **Optional Configuration** (add to `.env`):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstools/fast_dev.sh:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Create minimal .env if not existsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstools/hot_reload.py:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif path.suffix not in [".py", ".toml", ".yaml", ".yml", ".env"]:Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionserver.json:123 · File type combined with upload action — agent may exfiltrate local data files"description": "Optional database URL. Defaults to SQLite (sqlite:///maverick_mcp.db) if not provided. PostgreSQL supported for better performance.",Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
HIGH
Access to sensitive file pathsscripts/setup_database.sh:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho "3. Add it to your .env file: TIINGO_API_KEY=your_api_key_here"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:573 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# In .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstools/fast_dev.sh:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ ! -f .env ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstools/fast_dev.sh:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho -e "${YELLOW}Created minimal .env for fast mode${NC}"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Process kill commandscripts/dev.sh:22 · Process kill command — agent can terminate processeskill -9 $EXISTING_PID 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
npx invocation of non-well-known packageCLAUDE.md:366 · npx invocation of non-well-known package — may execute untrusted code- **Installation**: `npx mcp-remote <server-url>`Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
Destructive file system command detectedDockerfile:15 · Destructive file system command detected&& rm -rf /var/lib/apt/lists/*Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsserver.json:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"Copy .env.example to .env and add your TIINGO_API_KEY",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)scripts/dev.sh:178 · MCP server using network transport (SSE/HTTP) — data sent over networkecho -e '{"mcpServers": {"maverick-mcp": {"command": "npx", "args": ["-y", "mcp-remote", "http://localhost:8003/mcp"]}}}'Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
Access to sensitive file pathsMakefile:177 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp .env.example .env; \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsserver.json:86 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"Copy .env.example to .env and add your TIINGO_API_KEY",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathsdocker-compose.yml:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- ./.env:/app/.envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/run-migrations.sh:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/run-migrations.sh:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesecho -e "${RED}Error: .env file not found${NC}"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)scripts/dev.sh:170 · MCP server using network transport (SSE/HTTP) — data sent over networkecho -e '{"mcpServers": {"maverick-mcp": {"command": "npx", "args": ["-y", "mcp-remote", "http://localhost:8003/sse/"]}}}'Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
Python subprocess execution detectedtools/hot_reload.py:47 · Python subprocess execution detectedself.process = subprocess.Popen(self.command)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)scripts/dev.sh:176 · MCP server using network transport (SSE/HTTP) — data sent over networkecho -e '{"mcpServers": {"maverick-mcp": {"command": "npx", "args": ["-y", "mcp-remote", "http://localhost:8003/mcp"]}}}'Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
HIGH
Access to sensitive file pathsscripts/run-migrations.sh:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f .env ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandDockerfile:49 · File permission modification command — agent changes file ownership/permissionschown -R maverick:maverick /appFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Process kill commandscripts/dev.sh:100 · Process kill command — agent can terminate processesif ! kill -0 $BACKEND_PID 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathsCLAUDE.md:65 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescp .env.example .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathstests/integration/README.md:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Add API keys to `.env` file for full functionality testingFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Access to sensitive file pathsMakefile:176 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files@if [ ! -f .env ]; then \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Remote installer piped to shellscripts/dev.sh:66 · Remote installer piped to shellecho -e "${RED}uv not found! Please install uv: curl -LsSf https://astral.sh/uv/install.sh | sh${NC}"Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST07
HIGH
Access to sensitive file pathsCLAUDE.md:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. **Required Configuration** (add to `.env`):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstools/fast_dev.sh:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescat > .env << EOFFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packageserver.json:88 · npx invocation of non-well-known package — may execute untrusted code"Connect via mcp-remote: npx mcp-remote http://localhost:8003/mcp/"Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsscripts/dev.sh:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File type combined with upload actionserver.json:58 · File type combined with upload action — agent may exfiltrate local data files"description": "Optional database URL. Defaults to SQLite (sqlite:///maverick_mcp.db) if not provided. PostgreSQL supported for better performance.",Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈7,144 tok
2 files · 81 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for mseep-maverick-mcp@0.1.0 as of 2d ago. This is the package itself, not its dependencies.

What would make this Verified

8 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Pipe-to-shell pattern≈ +9 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
  2. Unclaimed publisher≈ +8 on the totalClaim mseep-support: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  6. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to PyPI, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim mseep-supportPropose a patch to the maintainer