mcpctl
Facilitates management of MCP server configurations, enabling users to add, remove, and troubleshoot servers efficiently.
Install this skill
or
73/100
Security score
The mcpctl skill was audited on Jun 12, 2026 and we found 7 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 14
Access to hidden dotfiles in home directory
SourceSKILL.md
| 14 | 1. **Global** — `~/.pi/agent/mcp.json` |
medium line 39
Access to hidden dotfiles in home directory
SourceSKILL.md
| 39 | | **Global** | `~/.pi/agent/mcp.json` | Nix (home-manager) | Edit `~/.dotfiles/home/common/programs/pi-coding-agent/mcp.json`, then `just home` | |
medium line 42
Access to hidden dotfiles in home directory
SourceSKILL.md
| 42 | **Global is nix-managed.** The file at `~/.pi/agent/mcp.json` is a symlink to the nix store. To change it: |
medium line 44
Access to hidden dotfiles in home directory
SourceSKILL.md
| 44 | 1. Edit the source: `~/.dotfiles/home/common/programs/pi-coding-agent/mcp.json` |
medium line 141
Access to hidden dotfiles in home directory
SourceSKILL.md
| 141 | 1. Read global config: `~/.dotfiles/home/common/programs/pi-coding-agent/mcp.json` |
low line 73
External URL reference
SourceSKILL.md
| 73 | "url": "http://localhost:8080/mcp", |
low line 86
External URL reference
SourceSKILL.md
| 86 | "url": "https://example.com/mcp" |
Scanned on Jun 12, 2026
View Security DashboardGitHub Stars 221
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
claudeclaude-codecursorcodexwindsurfvscodefrontendtestingbackenddevops-srebackend-developertechnical-pmdevelopmentproduct
megalithic/dotfiles