mcp-connector-generator

The skill presents a legitimate scaffolding utility for MCP-based connectors, aligning with its stated purpose of generating boilerplate toolsets for various connection patterns. However, there are notable security considerations: injecting secrets into the environment for local subprocesses, transmitting API keys via HTTP headers to remote MCP endpoints, and potential untrusted handling of inputs when triggering local scripts. The scope appears modest and scoped to boilerplate generation, but credential handling and data flow to external endpoints warrant explicit safeguards (env-scoping, secret management, least-privilege, explicit consent prompts, and clear data-flow boundaries). Overall, the footprint is proportionate to its stated purpose but remains suspicious enough to warrant caution due to credential exposure and networkBeacon risk if not properly implemented.