Skip to main content

mk.repos

Manages repo catalogs and MCP server configurations with stack detection and template-based management for efficient server handling.

Install this skill

or
60/100

Security score

The mk.repos skill was audited on Mar 1, 2026 and we found 4 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 8

Template literal with variable interpolation in command context

SourceSKILL.md
8Manages the repo catalog (`${XDG_CONFIG_HOME:-~/.config}/my-kit/repos.json`) and per-repo `.mcp.json` configuration. Auto-activates when the user expresses intent to manage repos or MCP servers.
high line 74

Template literal with variable interpolation in command context

SourceSKILL.md
74- `${XDG_CONFIG_HOME:-~/.config}/my-kit/repos.json` — Repo catalog (user data, outside the repo)
medium line 8

Access to hidden dotfiles in home directory

SourceSKILL.md
8Manages the repo catalog (`${XDG_CONFIG_HOME:-~/.config}/my-kit/repos.json`) and per-repo `.mcp.json` configuration. Auto-activates when the user expresses intent to manage repos or MCP servers.
medium line 74

Access to hidden dotfiles in home directory

SourceSKILL.md
74- `${XDG_CONFIG_HOME:-~/.config}/my-kit/repos.json` — Repo catalog (user data, outside the repo)
Scanned on Mar 1, 2026
View Security Dashboard