mcp-builder

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/connections.py and scripts/evaluation.py files facilitate the execution of local system commands to launch MCP servers during testing. This is accomplished via the official mcp library's stdio_client which spawns subprocesses based on user-provided command-line arguments.
  • [EXTERNAL_DOWNLOADS]: The skill's scripts/requirements.txt specifies dependencies on well-known and trusted packages: anthropic and mcp. These are standard requirements for interacting with AI models and the Model Context Protocol.
  • [SAFE]: The documentation includes comprehensive security best practices in guides/mcp_best_practices.md, advising developers on input validation, secure credential management (using environment variables), and access control for the tools they build.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 03:12 AM