Capability drift in 26zl/cybersec-toolkit

github 26zl/cybersec-toolkit D

One command installs 670+ security tools on Linux & Termux. Its authorization-gated MCP server works with Claude Code, OpenCode, Codex, Gemini CLI, Ollama-backed agents and other MCP clients. Includes 870+ agent skills for CTF, pentesting, bug bounty, DFIR and red/blue teams—companion by default, autonomous when asked.

maintainer: 26zl
tools: 15
CVEs: 0
releases: 5

advisory #857657

HIGH 26zl/cybersec-toolkit 09-02 17:35

code analysis flagged hidden prompt content in 26zl/cybersec-toolkit

current permission surface (inferred):

drift timeline for 26zl/cybersec-toolkit → security tab →

drift history for this server newest 8

HIGH 09-09 18:31 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-09 17:01 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-07 18:17 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-07 18:04 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-06 18:21 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-05 18:58 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-05 16:17 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit
HIGH 09-02 17:35 code analysis flagged hidden prompt content in 26zl/cybersec-toolkit you are here

This server has drifted again since this advisory — a dated claim is a snapshot, not a current state.