mcp-server-creator
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides users through the legitimate process of building and testing MCP servers using official SDKs.
- [COMMAND_EXECUTION]: The workflow includes standard shell commands for project setup (e.g.,
mkdir,npm init,uv init). The provided TypeScript template includes a build script that usesnode -eto set execution permissions on the resulting server file viachmodSync, which is standard for creating executable CLI tools. - [EXTERNAL_DOWNLOADS]: The skill recommends installing official and well-known dependencies from established registries (NPM and PyPI), such as
@modelcontextprotocol/sdk,zod, and various database drivers. - [SAFE]: Includes a dedicated security phase (
workflow/phase-4-security.md) that instructs users on securing secrets via.envfiles and implementing input validation to protect against injection vulnerabilities.
Audit Metadata