SkillTriage
Coder MCP server
github:coder/coder
Review
Capabilities a person should look at before installing.
Why
- Contains instructions placed where the agent reads them indirectly. in
.agents/skills/coder-agents-review/SKILL.md - Can send local secret values over the network. in
.agents/skills/deploy-ephemeral/SKILL.md - Contains instructions placed where the agent reads them indirectly. in
.claude/skills/doc-check/SKILL.md - Asks the agent to list its tools, commands or reachable paths. in
.claude/skills/frontend-deep-review/reviewer-prompt.md - Contains instructions placed where the agent reads them indirectly. in
AGENTS.md - Contains a pattern that opens a remote shell or runs remote code. in
.github/scripts/postgres-diagnostics.ps1 - Contains invisible or obfuscated characters. in
site/src/pages/TerminalPage/TerminalPage.stories.tsx - Contains instructions placed where the agent reads them indirectly. in
.claude/docs/DATABASE.md - Contains text addressed only to AI readers. in
coderd/x/chatd/ARCHITECTURE.md - Changes AI rules or configuration files. in
docs/admin/external-auth.md - Asks the agent to list its tools, commands or reachable paths. in
docs/ai-coder/ai-gateway/auth.md - Starts other processes and makes network requests. in
scripts/harbor-coder/harbor_coder/bootstrap.py
GitHub archives have no registry checksum; the result is tied to the commit shown.
Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →