Shellockolm-AI-CLI-MCP-Scanner

Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀

What does this entry provide?

Shellockolm-AI-CLI-MCP-Scanner is an MCP server entry in ChatHome Skills, sourced from GitHub MCP Search and scored 29/100. Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding Shellockolm-AI-CLI-MCP-Scanner to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: GitHub MCP Search
Quality: 29/100
Install method: source code
Repo: hlsitechio/Shellockolm-AI-CLI-MCP-Scanner
Repo updated: Sep 29, 2026

Source checkout

git clone https://github.com/hlsitechio/Shellockolm-AI-CLI-MCP-Scanner.git

Install method: source code

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Sep 29, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

Security signals

highMatched in: skillBody
Downloads a script and pipes it straight into a shell, executing remote code with no review.
curl -fsSL https://raw.githubusercontent.com/hlsitechio/shellockolm/main/scripts/install-debian.sh | bashDispute this flag?

Scan coverage: Install metadata and repository README.

Automated signals from install metadata and a bounded skill body — not a full code security audit and not a recursive source or dependency review.

MCP manifest

{
  "fullName": "hlsitechio/Shellockolm-AI-CLI-MCP-Scanner"
}

Discovery note

Welcome to Shellockolm-ai-CLI-MCP-Scanner - 🎯 Your React app is probably vulnerable. Find out in 30 seconds 🚀

Report an issue with this listing