mcp-setup
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a legitimate technical resource and toolkit for developers integrating AI agents with external tools via the Model Context Protocol.
- [CREDENTIALS_UNSAFE]: The documentation and examples correctly utilize placeholders such as
ghp_xxxx,your-api-key, andxoxb-xxxxto prevent the exposure of real credentials. Generic local connection strings likepostgresql://user:pass@localhost/dbare used safely for illustrative purposes. - [EXTERNAL_DOWNLOADS]: The
mcp-initializer.shscript and the configuration examples reference official packages from the@modelcontextprotocolscope. These are well-known, trusted ecosystem libraries installed through standard registries like NPM and PyPI. - [COMMAND_EXECUTION]: The included bash scripts (
mcp-initializer.sh,mcp-validator.sh) perform routine development tasks such as directory creation, project initialization, and JSON validation using standard tools likemkdir,npm,pip, andjq. - [SAFE]: Documentation provides instructions on the local file paths for Claude Desktop configurations to assist users in manual setup without attempting to exfiltrate or silently modify these files.
Audit Metadata