https://github.com/Abracadabrastartup/deusproof-mcp
deusproof
Hostile
Score 60 / 100 · 1 files read · 1 critical, 0 high, 0 medium, 0 low findings
Report f4a5ebc6a140e2de · first scanned 2026-10-28 · scanned 4× · keyed to the exact package contents, so this link always shows this version
Subscores
100 is clean. Deductions come only from the cited findings below.
Findings
criticalDownloads a remote file and pipes it straight into a shell interpreter
SKILL.md · line 65 · rule C1
omatically ```bash curl -fsSL https://deusproof.com/git/install.sh | sh ``` From then on each commit notarizes `sha256("deusproo
Permission surface
- Network endpoints
- deusproof.com
- Environment read
- no named variables
- Shell execution
- no
- Install hooks
- none
- Credential material
- none referenced
Provenance
- Source
- GitHub
- Repository
- Abracadabrastartup/deusproof-mcp
- Owner
- Abracadabrastartup
- Stars
- 0
- Forks
- 0
- Repo created
- 2026-07-15
- Last push
- 2026-10-15
Watch this package
Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.
Share this report: https://preflight.orbitaldeskllc.com/r/f4a5ebc6a140e2de