ScopeBlind protect-mcp

• Analyzed: May 1, 2026, 8:32 AM
• Findings: 1
• Version: 1.0.0
• Hash: d18ef6ec0d5d33d7346343adba526eb9c9d60fe3c47f91c9c547f7b1761bb208
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill describes a security gateway for MCP (Model Context Protocol) servers designed to provide policy enforcement, human approval gates, and Ed25519-signed audit logs. The instructions in SKILL.md are consistent with its stated purpose, referencing legitimate security concepts like the OWASP MCP Top 10 and IETF drafts. While it requires broad permissions (Bash, Read, Write) and installs external npm packages (protect-mcp, @veritasacta/verify), these are standard for a CLI-based security proxy and no evidence of malicious intent or prompt injection was found.