swift-mcp-server-generator

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's Package.swift template references several official and well-known libraries, including the official MCP Swift SDK, Apple's logging library, and the Swift Server community's service lifecycle library. These references are standard for Swift development and point to trusted organizations.
  • [COMMAND_EXECUTION]: The documentation includes standard commands for building, running, and installing the generated server. This includes using the Swift compiler (swift build) and moving the resulting binary to the local binary directory (/usr/local/bin/). These are transparent, user-initiated actions expected for a code generation tool.
  • [PROMPT_INJECTION]: The skill does not contain instructions that attempt to override agent behavior or bypass safety guidelines. The instructional language is focused on project structure and code templates.
  • [DATA_EXFILTRATION]: No patterns of sensitive data access or unauthorized exfiltration were found. The generated code templates handle local tool logic (like math and greeting) without accessing sensitive system files or credentials.
  • [INDIRECT_PROMPT_INJECTION]: The generated server templates include tool and prompt handlers that ingest external input.
  • Ingestion points: Arguments such as name, operation, language, and focus (found in ToolHandlers.swift and PromptHandlers.swift).
  • Boundary markers: The templates use structured types and interpolation for logging and output, which is a standard pattern.
  • Capability inventory: The provided handlers perform local computations and string generation with no file-system or network write capabilities.
  • Sanitization: The templates include basic validation for required parameters and error handling for invalid operations (e.g., division by zero).
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 05:26 AM