FastMCP Development

Fail

Audited by Gen Agent Trust Hub on Feb 14, 2026

Risk Level: HIGH
Full Analysis
  • [SAFE] (SAFE): The analyzed files contain no malicious patterns. The shell script run_validation_tests.sh performs basic structural checks on a local documentation file using standard utilities (grep, head, wc).
  • [EXTERNAL_DOWNLOADS] (SAFE): The automated scan alert regarding a 'malicious URL' appears to be a false positive. The string 'logger.info' is a common programming pattern for logging and was likely misidentified as a URL by the scanner. No actual network requests or external downloads are present in the code.
  • [COMMAND_EXECUTION] (LOW): The shell script executes local commands to validate file contents. This is a standard development practice and does not involve untrusted input or risky execution patterns.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 14, 2026, 04:48 PM