{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-03-31T21:07:31.576000+00:00","analysis_method":"capability_triage","category":"Desktop Extension","description":"__Secure your code by default.__\nThe Socket MCP server brings powerful, real-time dependency scanning directly into Claude. Instantly audit packages from npm...","did":"ant-dir-gh-socketdev-socket-mcp","homepage_url":"https://github.com/SocketDev/socket-mcp","icon":"https://claude.ai/api/dxt/extensions/ant.dir.gh.socketdev.socket-mcp/versions/0.0.19/icon.png","id":"ant.dir.gh.socketdev.socket-mcp","installs":731,"last_scanned":"","license":"MIT","long_description":"__Secure your code by default.__\nThe Socket MCP server brings powerful, real-time dependency scanning directly into Claude. Instantly audit packages from npm, PyPI, Cargo, and more-right inside your chats-with zero setup. Built on the Model Context Protocol (MCP), this extension automatically evaluates packages for:\n - Vulnerabilities and malware\n - Supply chain risks\n - Code quality and maintenance\n - License compliance\n\n With a single command, Claude will return detailed...","name":"Socket","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-gh-socketdev-socket-mcp&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Socket","publisher_url":"https://socket.dev/","repository_url":"https://github.com/SocketDev/socket-mcp","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.","evidence":"Connector has 1 tools; permissions on claude.ai/directory: \"unknown\". Data flows out of the connected service into the model.","remediation":{"block_tool_categories":[],"steps":["Connect using an account that only has access to the information you actually want Claude to read - not your main admin login.","When you grant access, pick the smallest set of folders, mailboxes, or channels possible.","Check the connector's activity log every so often to make sure nothing unexpected is being read."]},"risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"}],"signature_status":"unsigned","source_code_reviewed":true,"tags":["reads_private_data"],"tools":[{"description":"","name":"depscore"}],"tools_count":1,"type":"desktop_extension","url":"","uuid":"a2f58d6d-c9ee-5dfe-846b-2748c6cf7a97","version":"0.0.19"},"query_key":"socket socket","schema_version":1,"status":"match"}