I, Pencil verification

Check Proof of Process chains: record, file match, timestamps, registry. Never one verdict.

by xyz.sotapopv1.1.00 installsNOASSERTION

Requested permissions

medium
Network access
Makes outbound network requests
high
Local command execution
Launches `npx -y @ipopcil/mcp@1.1.0` on your machine
medium
External APIs
Sends tool calls and their arguments to the server

No suspicious patterns found. aidevkit never executes scripts from an artifact when installing it.

sha256 36af9d3f1ef4940116cfe5ba55d9e7a14ce3a9920fb6e16de5208e7781657252