v1.0.0

Frinkiac - Search, browse, and generate memes from The Simpsons, Futurama, Rick and Morty, and 30 Rock scenes

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:18 AM.

Analysis

The skill’s purpose is coherent and low-impact, but it asks you to add an unpinned npm-based MCP server and use external TV screenshot/meme APIs.

GuidanceThis looks like a coherent TV screenshot and meme skill. Before installing, check the npm MCP package it asks you to run, consider pinning a trusted version, and avoid entering private or sensitive text into the search or meme fields.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

SKILL.md

"command": "npx", "args": ["-y", "@ryantenney/frinkiac-mcp"]

The skill relies on a remote npm package launched through npx without a pinned version. This is central to the skill’s MCP setup, but users should notice the package provenance and version are not fixed in the artifact.

User impactInstalling the MCP server may run third-party npm code, and future package changes could affect what the server does.

RecommendationReview the npm package before adding it to MCP config, and prefer pinning a specific trusted version if possible.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityInfoConfidenceHighStatusNote

SKILL.md

This skill uses an MCP server... Search dialogue, browse scenes, and generate memes... using the Frinkiac/Morbotron APIs.

The skill discloses an MCP/API data flow for searches, screenshots, captions, and meme generation. This is purpose-aligned, but user-provided queries and meme text may be sent to external services.

User impactSearch phrases or custom meme text could be processed outside your local agent environment.

RecommendationUse non-sensitive search terms and meme text, and avoid sending private information through the meme-generation or search fields.