Is 0x1abin/matter-controller-mcp safe?
Yes. 0x1abin/matter-controller-mcp is safe to install. Oathe's behavioral security audit gave the matter-controller-mcp skill by 0x1abin a trust score of 92/100 with 4 findings, none critical or high.
https://github.com/0x1abin/matter-controller-mcp
Is 0x1abin/matter-controller-mcp safe to install?
This is a legitimate Matter Controller MCP server for smart home device control with clean code and standard practices. The empty SKILL.md file is unusual but not malicious, and canary file access occurred during monitoring setup rather than skill execution.
What security issues were found in 0x1abin/matter-controller-mcp?
Category Scores
Findings (4)
LOW Empty SKILL.md file -5 ▶
The SKILL.md file is completely empty, which is unusual for MCP skills that typically contain agent instructions or descriptions.
MEDIUM Sensitive file access during monitoring -15 ▶
Multiple sensitive canary files (.env, SSH keys, AWS credentials) were accessed, but this occurred during monitoring setup before skill installation, not by the skill itself.
INFO Standard build process with executable permissions -10 ▶
Build script includes chmod +x for distribution files, which is standard practice for CLI tools but worth noting.
INFO Smart home device control capabilities -15 ▶
This skill provides legitimate Matter smart home device control functionality, including commissioning, decommissioning, and device manipulation capabilities that users should be aware of.
Should I install 0x1abin/matter-controller-mcp?
Oathe's verdict for 0x1abin/matter-controller-mcp is SAFE with a trust score of 92/100. Recommendation: Install.