MCP security report
skipseek.com
F43/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓9 tools scanned
https://skipseek.com/mcp
mediumget_market_research
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcreate_forecast
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_forecaster_record
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumlist_markets
Embedded instruction to redirect the agent to an external, unvetted MCP server
The description tells the agent that for single sports-fixture questions it should use 'SkipOdds at https://skipodds.com/mcp' instead of the current tool. This embeds a recommendation to connect to and invoke an entirely different, external MCP server by URL inside a tool description. An agent that follows this blindly could begin interacting with an unverified third-party service the user never explicitly approved, which is a classic vector for scope creep or redirection to a malicious endpoint if that domain were ever compromised or spoofed. This kind of cross-server routing instruction should come from the user/host configuration, not be embedded in another tool's description.
lowlist_markets
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcreate_forecast
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowget_forecaster_record
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/67b30339-ad94-4e73-b231-16ae5421260f)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free