Glin Profanity MCP

• Analyzed: May 12, 2026, 3:14 AM
• Findings: 1
• Version: 1.0.0
• Hash: 897a3b0e64b3cf4c5690868b64408f50f2e6b6862a00b29f51b3af8e0c2521e0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is suspicious due to the advertised 'User Tracking' capabilities in SKILL.md, which include tools like `track_user_message`, `get_user_profile`, and `get_high_risk_users`. These tools imply the collection and storage of sensitive user data (messages, moderation history, violation rates), posing a significant privacy risk. Additionally, the installation instructions in SKILL.md use `npx -y glin-profanity-mcp`, which executes an external npm package without user confirmation, introducing a supply chain risk by allowing arbitrary code execution from an untrusted source.