socket-mcp
Dependency security scores and vulnerability checks inside your editor
All Skills in This Repository (78)
Pure Emerald Level Indicators
SocketDevfleet-triaging-findings
Triage raw security-scanner output into prioritized findings with owners.
SocketDevfleet-updating-hooks-dry
Audit fleet hook trees and oxlint plugin configurations for duplication and bloat.
SocketDevfleet-scanning-quality
Orchestrate parallel code scans and generate an A-F prioritized markdown report.
SocketDevfleet-updating-pricing
Fetch current vendor prices and update model-pricing.json with today's date.
SocketDevfleet-scanning-security
Scan CLAUDE config, GitHub Actions, and dependencies to generate an A-F graded security report.
SocketDevfleet-cascading-fleet
Propagate wheelhouse template SHAs and registry pins across fleet repositories.
SocketDevfleet-guarding-paths
Audit and fix path duplication across Socket repositories to enforce canonical path references.
SocketDevfleet-updating-coverage
Run coverage tooling and update the root README coverage badge.
SocketDevfleet-tidying-files
Sweep fleet repositories for junk files and stray temporary directories.
SocketDevfleet-reordering-release-bump
Relocate a release bump commit to the default branch tip and retag vX.Y.Z.
SocketDevfleet-optimizing-submodules
Determine and apply minimal sparse-checkout patterns for .gitmodules submodules using Bash and Node.js scripts.
SocketDevfleet-auditing-api-surface
Identifies and classifies unused or dead API export subpaths in libraries via fleet-wide analysis.
Frequently Asked Questions
FAQPage SchemaHow to install Socket MCP?▼
Run `npx skills add SocketDev/socket-mcp --all -g -y` in your terminal to install all skills in this suite globally.
How to check if a package is safe to install?▼
Ask your AI assistant for the Socket security score of any package and version, and it returns vulnerability and risk data instantly.
Can Socket MCP audit my whole package.json?▼
Yes. It scans every dependency in your package.json in one batch request and flags risky or vulnerable packages.
Does Socket MCP work with Claude and Cursor?▼
Yes. It follows the Model Context Protocol standard and connects to Claude, VS Code Copilot, Cursor, and Windsurf.
Do I need an API key to use Socket MCP?▼
No. The public hosted server uses OAuth sign-in through your browser, so there is no API key to copy or manage.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core