superise-mcp-usage
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the AI agent to use
curlto interact with a local service at127.0.0.1:18799. This includes health checks and manual HTTP requests to the/mcpendpoint to execute wallet operations. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes data from the local wallet service (such as tool definitions and wallet query outputs) which could theoretically be manipulated to contain adversarial instructions. Ingestion points: Data returned from the
tools/listand wallet-specific tool calls. Boundary markers: No specific delimiters or safety instructions are provided to distinguish between data and commands in the tool outputs. Capability inventory: The agent can execute shell commands viacurland perform network operations on localhost. Sanitization: There is no evidence of sanitization or validation of the content retrieved from the local MCP server before it is processed by the agent.
Audit Metadata