mcp-setup

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a legitimate technical resource and toolkit for developers integrating AI agents with external tools via the Model Context Protocol.
  • [CREDENTIALS_UNSAFE]: The documentation and examples correctly utilize placeholders such as ghp_xxxx, your-api-key, and xoxb-xxxx to prevent the exposure of real credentials. Generic local connection strings like postgresql://user:pass@localhost/db are used safely for illustrative purposes.
  • [EXTERNAL_DOWNLOADS]: The mcp-initializer.sh script and the configuration examples reference official packages from the @modelcontextprotocol scope. These are well-known, trusted ecosystem libraries installed through standard registries like NPM and PyPI.
  • [COMMAND_EXECUTION]: The included bash scripts (mcp-initializer.sh, mcp-validator.sh) perform routine development tasks such as directory creation, project initialization, and JSON validation using standard tools like mkdir, npm, pip, and jq.
  • [SAFE]: Documentation provides instructions on the local file paths for Claude Desktop configurations to assist users in manual setup without attempting to exfiltrate or silently modify these files.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 01:22 AM