myco:claude-plugin-config
Manages the lifecycle and configuration of Claude MCP plugins, ensuring stability and proper transport setup for local development and production.
Install this skill
or
64/100
Security score
The myco:claude-plugin-config skill was audited on May 21, 2026 and we found 10 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 42
Template literal with variable interpolation in command context
SourceSKILL.md
| 42 | Every `plugins/unifi-*/plugin.json` contains `UNIFI_MCP_HTTP_FORCE` in its environment variable section. This env var is read by the app server's `config.yaml` via `force: ${oc.env:UNIFI_MCP_HTTP_FORC |
medium line 205
Template literal with variable interpolation in command context
SourceSKILL.md
| 205 | ```bash |
medium line 217
Template literal with variable interpolation in command context
SourceSKILL.md
| 217 | ```bash |
medium line 42
Access to .env file
SourceSKILL.md
| 42 | Every `plugins/unifi-*/plugin.json` contains `UNIFI_MCP_HTTP_FORCE` in its environment variable section. This env var is read by the app server's `config.yaml` via `force: ${oc.env:UNIFI_MCP_HTTP_FORC |
low line 208
External URL reference
SourceSKILL.md
| 208 | unifi-network) echo "https://${UNIFI_HOST}/proxy/network" ;; |
low line 209
External URL reference
SourceSKILL.md
| 209 | unifi-protect) echo "https://${UNIFI_HOST}/proxy/protect" ;; |
low line 210
External URL reference
SourceSKILL.md
| 210 | unifi-access) echo "https://${UNIFI_HOST}/proxy/access" ;; |
low line 218
External URL reference
SourceSKILL.md
| 218 | NETWORK_ENDPOINT="https://${UNIFI_HOST}/proxy/network" |
low line 219
External URL reference
SourceSKILL.md
| 219 | PROTECT_ENDPOINT="https://${UNIFI_HOST}/proxy/protect" |
low line 220
External URL reference
SourceSKILL.md
| 220 | ACCESS_ENDPOINT="https://${UNIFI_HOST}/proxy/access" |
Scanned on May 21, 2026
View Security Dashboard