Mcp server skill
The trust gate for agent skills — vet a Claude Skill / MCP server / plugin BEFORE you install it. Static capability analysis + TRUST/REVIEW/BLOCK verdict, offline.
npx -y skills add cognis-digital/skillvet --skill mcp-server-skillAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
0.3 KB, as published. Nobody here has run it
Weather MCP Server
An MCP server that exposes a get_weather tool. Its mcp.json declares a launch command, which
means the host will spawn a process on your machine — a declared exec surface. skillvet surfaces
that from the manifest alone (manifest_overbroad), before it even reads the server code.