Is n8n:setup-mcps-f095ed safe to install?

SaferSkills independently audited n8n:setup-mcps-f095ed (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.opencode/skills/setup-mcps/SKILL.md · 1 file

.opencode/skills/setup-mcps/SKILL.md2.2 KB · Markdown

name: n8n:setup-mcps

description: >-

Configure MCP servers for n8n development in OpenCode. Use when the user says

/setup-mcps or asks to set up MCP servers for n8n.

MCP Setup for n8n Development in OpenCode

Configure commonly used MCP servers for n8n engineers using OpenCode MCP config.

Instructions

Check which MCPs are already configured by running, if available:

opencode mcp list

Parse by URL or command, not just server name. Skip any MCP whose URL is already present.

Known MCP URLs:

Linear: https://mcp.linear.app/mcp
Notion: https://mcp.notion.com/mcp
Context7: https://mcp.context7.com/mcp
Figma: https://mcp.figma.com/mcp

Ask the user which unconfigured MCPs they want to add. If all are already

configured, tell the user and stop.

Option	Label	Description
Linear	`Linear`	Linear ticket management with OAuth
Notion	`Notion`	Notion workspace integration with OAuth
Context7	`Context7`	Library documentation lookup
Figma	`Figma`	Figma design integration with OAuth

Ask once whether to install in user or project scope.

Scope	Config path	When to use
user	`~/.config/opencode/opencode.json`	Default. Available in all projects.
project	`./opencode.json`	Only when the user explicitly wants repo-local config.

Add the selected MCP entries under the mcp object in the selected config.

Preserve existing config keys and existing MCP entries.

{
  "mcp": {
    "linear": {
      "type": "remote",
      "url": "https://mcp.linear.app/mcp",
      "enabled": true
    },
    "notion": {
      "type": "remote",
      "url": "https://mcp.notion.com/mcp",
      "enabled": true
    },
    "context7": {
      "type": "remote",
      "url": "https://mcp.context7.com/mcp",
      "enabled": true
    },
    "figma": {
      "type": "remote",
      "url": "https://mcp.figma.com/mcp",
      "enabled": true
    }
  }
}

After editing config, tell the user to authenticate OAuth-backed servers with:

opencode mcp auth <server-name>

Use the configured server names, for example linear, notion, or figma. Context7 does not require OAuth by default.

n8n:setup-mcps-f095ed— agent skill

Is n8n:setup-mcps-f095ed safe to install?

MCP Setup for n8n Development in OpenCode

Instructions

Audit the pieces. Scan the whole. Decide.