vet-agent-tool-recommendations

allglenn/vet-agent-tool-recommendations
★ 0 stars Unknown language Code/Dev Tools Updated today
A read-only security skill for evaluating repositories, packages, MCP servers, plugins, and installation commands recommended by AI agents.
View on GitHub → 🔍 Audit Wallet Slippage →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "vet-agent-tool-recom": {
      "command": "npx",
      "args": [
        "-y",
        "allglenn/vet-agent-tool-recommendations"
      ]
    }
  }
}

README Excerpt

A reusable skill/rule set that makes coding agents pause and evaluate a tool, package, or repository **before** installing it — instead of cloning, running, or `pip install`-ing whatever they (or a search result) just recommended. Coding agents routinely suggest npm packages, pip packages, MCP servers, CLI installers, and "helpful" GitHub repos. Some of those recommendations are typosquats, abandoned/hijacked packages, or repos that shell out to a remote script during install. This skill gives t