Is wrenchpilot/it-tools-mcp safe to install?

wrenchpilot/it-tools-mcp was flagged as CRITICAL RISK (risk score 130) with 15 findings detected across 158 files. Review the findings before installing.

What security issues were found in wrenchpilot/it-tools-mcp?

Sigil detected 15 findings in wrenchpilot/it-tools-mcp, including patterns related to provenance, network_exfil, obfuscation, code_patterns. See the full scan report for details.

Scans/github/wrenchpilot/it-tools-mcp

wrenchpilot/it-tools-mcp

github

Summary

wrenchpilot/it-tools-mcp v2026-03-25 was classified as CRITICAL RISK with a risk score of 130. Sigil detected 15 findings across 158 files, covering phases including provenance, network exfiltration, obfuscation, code patterns. Review the findings below before installing this package.

Package description: A comprehensive Model Context Protocol (MCP) server that provides access to over 100 IT tools and utilities commonly used by developers, system administrators, and IT professionals. Inspired by htt...

CRITICAL RISK(130)

v2026-03-25

27 March 2026, 05:54 UTC

by Sigil Bot

Risk Score

130

Findings

Files Scanned

158

Provenance

Registry

https://github.com/wrenchpilot/it-tools-mcp

Repository

https://github.com/wrenchpilot/it-tools-mcp

Scanned From

https://github.com/wrenchpilot/it-tools-mcp.git

Findings by Phase

•

Phase Ordering

Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.

Badge

Markdown

[![Sigil Scan](https://sigilsec.ai/badge/github/wrenchpilot/it-tools-mcp)](https://sigilsec.ai/scans/DA5D242A-FB5C-4D3C-BC05-F1BC2AE5F90E)

HTML

<a href="https://sigilsec.ai/scans/DA5D242A-FB5C-4D3C-BC05-F1BC2AE5F90E"><img src="https://sigilsec.ai/badge/github/wrenchpilot/it-tools-mcp" alt="Sigil Scan"></a>

Run This Scan Yourself