AADDYY AI Tools

• Risk level: Low
• Analyzed: Apr 3, 2026, 4:54 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are consistent with its stated purpose (running an MCP server via npx and an API key), but it relies on executing third‑party npm code at runtime so you should vet the provider before use.

This skill appears internally consistent, but it pulls and runs an npm package at runtime and lets a third party (aaddyy) dynamically register tools for your agent. Before installing: (1) verify the npm package (@aaddyy/mcp-server) and inspect its source on npm/GitHub; (2) only provide an API key you trust—use a scoped or limited key if possible and avoid reusing high‑privilege credentials; (3) consider running the MCP server in an isolated environment (container) and monitor network activity; (4) be aware some offered tools (e.g., watermark removal) may enable copyright‑sensitive actions—use responsibly; (5) confirm pricing/credit model so automated agent calls can't exhaust your balance unexpectedly.