mcp-builder
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/connections.pyandscripts/evaluation.pyfiles facilitate the execution of local system commands to launch MCP servers during testing. This is accomplished via the officialmcplibrary'sstdio_clientwhich spawns subprocesses based on user-provided command-line arguments. - [EXTERNAL_DOWNLOADS]: The skill's
scripts/requirements.txtspecifies dependencies on well-known and trusted packages:anthropicandmcp. These are standard requirements for interacting with AI models and the Model Context Protocol. - [SAFE]: The documentation includes comprehensive security best practices in
guides/mcp_best_practices.md, advising developers on input validation, secure credential management (using environment variables), and access control for the tools they build.
Audit Metadata