Thegraph Mcp Skill

• Analyzed: May 11, 2026, 5:40 AM
• Findings: 1
• Version: 1.0.0
• Hash: 645363ee80471d8ba1fea57c76103bda332146377e88d645f4ae5cbc25043d30
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate integration for The Graph's MCP server, providing instructions for subgraph discovery and GraphQL querying via the 'uxc' utility. It follows security best practices by using environment variables for API keys (THEGRAPH_API_KEY) and includes a validation script (scripts/validate.sh) to ensure proper configuration and documentation standards. The workflow described in SKILL.md and usage-patterns.md focuses on discovery and schema inspection before execution, with no signs of malicious intent or unauthorized data access.