# Fix: a skill or MCP server has a bad verdict

Remove skills and MCP servers that are malicious or unknown, and vet new ones before install.

Check: installed skills and MCP servers. Controls: ASI04, MCP03, MCP04. A `malicious` verdict is critical.

## Detect

```bash
npx -y securemyagent checkup
```

Each installed skill and server is hashed and looked up in the Verdict Registry. Verdicts: `safe`, `caution`, `malicious`, `unknown`. Unknown ones are queued for scanning. Check again later.

List what is installed:

```bash
claude mcp list
ls ~/.claude/skills ~/.openclaw/skills 2>/dev/null
```

## Fix

Remove a bad skill:

```bash
sma remove-skill <skill-id>
```

Remove an MCP server:

```bash
claude mcp remove <name>
```

If the verdict was `malicious`, assume the machine was exposed. Rotate keys. See [ClawHavoc](https://securemyagent.ai/articles/clawhavoc-skill-malware).

## Vet before install

```bash
sma check <skill>
```

- `safe`: install.
- `caution`: read the reasons first.
- `malicious`: do not install.
- `unknown`: read the code yourself. Search for `curl`, `wget`, `base64`, `sudo`, and hosts you do not know.

Pin the version you vetted. A new version gets a new verdict.

## Wrong verdict?

Publishers can appeal. Appeals are answered within 48 hours. Contact: security@securemyagent.ai.

## Sources

- [ThaiCERT on the Koi audit](https://www.thaicert.or.th/en/2026/02/04/researchers-discover-over-200-malicious-skills-on-openclaw-distributing-password-stealing-malware/)
- [Snyk ToxicSkills](https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub)
- [Snyk on postmark-mcp](https://snyk.io/blog/malicious-mcp-server-on-npm-postmark-mcp-harvests-emails/)