build-mcp-app
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- Standard Application Architecture: The skill provides a comprehensive framework for serving inline user interfaces using sandboxed iframes. It details architecture boundaries, message protocols, and fallback strategies for non-supporting hosts, ensuring compliant execution environments.
- Built-in Security Constraints: It extensively documents platform constraints such as Content Security Policy (CSP) limitations and HTML iframe sandbox properties, guiding users on proper usage to prevent unauthorized resource loads.
- Data Privacy and Cost Management: It recommends standard infrastructure patterns for authless hosted endpoints, including caching layer strategies and rate-limiting rules utilizing specific IP ranges to help guard endpoints against exhaustion.
Audit Metadata