Is leo-paz/outlit-mcp safe?
Yes. leo-paz/outlit-mcp is safe to install. Oathe's behavioral security audit gave the outlit-mcp skill by leo-paz a trust score of 86/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/leo-paz/outlit-mcp
Is leo-paz/outlit-mcp safe to install?
This skill provides legitimate MCP integration for Outlit customer analytics with comprehensive documentation and no malicious code. The main considerations are dependency on external infrastructure and appropriate handling of business data through third-party services.
What security issues were found in leo-paz/outlit-mcp?
Category Scores
Findings (3)
MEDIUM External MCP Server Dependency -15 ▶
The skill configures connections to an external MCP server at mcp.outlit.ai and transmits user API keys to this third-party service. While legitimate for the skill's purpose, this creates dependency on external infrastructure.
LOW Shell Command Execution Instructions -25 ▶
The skill instructs the agent to execute shell commands for MCP setup, including environment detection and configuration commands. This is necessary for functionality but represents elevated permissions.
LOW Sensitive Data Access Scope -20 ▶
The skill enables querying customer analytics data including revenue metrics, user activity, and business intelligence through external service. Users should ensure appropriate data governance policies.
Should I install leo-paz/outlit-mcp?
Oathe's verdict for leo-paz/outlit-mcp is SAFE with a trust score of 86/100. Recommendation: Install with caution.