langchain4j-mcp-server-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides examples for configuring MCP clients that execute official packages from the Model Context Protocol organization (e.g., '@modelcontextprotocol/server-everything') via NPM. These references target well-known, official sources for the protocol implementation.- [COMMAND_EXECUTION]: Code templates include patterns for launching MCP servers using local shell commands or Docker containers. This is standard functionality for the protocol's stdio transport and is documented with appropriate security warnings regarding process lifecycle and logging.- [DATA_EXFILTRATION]: The skill explicitly promotes security-first tool exposure, providing examples of filtering tools based on user roles and naming conventions (e.g., blocking 'admin_' tools) to prevent accidental data exposure.- [PROMPT_INJECTION]: The documentation identifies the risk of indirect prompt injection from external resources and provides explicit instructions for sanitizing content and validating tool arguments before they reach the language model.
Audit Metadata