Report 01M7E3YVF3JZ1179DF2DE4K0FB · checks-v2
voidmob skill: automated checks
What HostedMCP checked on 14 Nov 2026, 22:48 UTC. Every result links to the public source it came from, so you can check it yourself.
Passed HostedMCP checks
100/100
7 of 7 checks ran · 0 high findings · not a security audit
- Checked
- 14 Nov 2026, 22:48 UTC
- Folder
- skills/voidmob ↗
- Files read
- SKILL.md and scripts
- Methodology
- checks-v2
Origin
25 / 25 points- PassSource repository linked and reachable10 pts
voidmobcom/voidmob-mcp/skills/voidmob is public and reachable
github.com/voidmobcom/voidmob-mcp/tree/HEAD/skills/voidmob ↗ - Pass
- PassCommit or release in the last year5 pts
Last commit 2026-11-09
github.com/voidmobcom/voidmob-mcp/commits ↗
Scripts
30 / 30 points- PassNo download-and-run or credential theft in scripts30 pts
No scripts in the skill folder
Instructions to the agent
30 / 30 points- PassNo hidden instructions in SKILL.md20 pts
No override phrases, safeguard switches, credential requests or hidden characters
github.com/voidmobcom/voidmob-mcp/blob/HEAD/skills/voidmob/SKILL.md ↗ - PassPre-approved tools are scoped10 pts
No pre-approved tools; the agent asks before using one
github.com/voidmobcom/voidmob-mcp/blob/HEAD/skills/voidmob/SKILL.md ↗
Format
15 / 15 points- PassSKILL.md follows the Agent Skills format15 pts
Valid name and description; says when to use it; 212 lines
github.com/voidmobcom/voidmob-mcp/blob/HEAD/skills/voidmob/SKILL.md ↗
What these checks do not cover
- Scripts are read, never run. Their logic is not audited, and up to five scripts per skill are read.
- Results describe the skill folder on the date above; a later commit can differ.
- A pass is not a guarantee of safety. Read the scripts before you let an agent run them, and keep allowed-tools narrow.