Is nftechie/transition-mcp safe?
Yes. nftechie/transition-mcp is safe to install. Oathe's behavioral security audit gave the transition-mcp skill by nftechie a trust score of 94/100 with 2 findings, none critical or high.
https://github.com/nftechie/transition-mcp
Is nftechie/transition-mcp safe to install?
This is a legitimate fitness coaching skill that provides API access to the Transition multisport coaching service. The skill contains clean API documentation, legitimate MCP server code, and shows no signs of malicious intent.
What security issues were found in nftechie/transition-mcp?
Category Scores
Findings (2)
LOW Honeypot file access during installation -10 ▶
Monitoring detected access to sensitive honeypot files (.env, SSH keys, AWS credentials) during the git clone installation process. However, this appears to be from normal system processes rather than malicious behavior by the skill itself.
INFO Executable code present -5 ▶
The skill contains Go source code for MCP server implementation and bash examples. All code appears legitimate and follows standard patterns for fitness API integration.
Should I install nftechie/transition-mcp?
Oathe's verdict for nftechie/transition-mcp is SAFE with a trust score of 94/100. Recommendation: Install.