model-enhancement-servers

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a detailed educational framework for building MCP servers. All code samples and implementations use standard TypeScript/Node.js patterns and official SDKs.
  • [EXTERNAL_DOWNLOADS]: The skill references and installs official packages from the Model Context Protocol organization (@modelcontextprotocol/sdk, @modelcontextprotocol/server-memory) and common development utilities (zod, chalk, yargs). These are well-known, trusted resources.
  • [COMMAND_EXECUTION]: Dockerfiles and installation instructions utilize standard package management (npm, npx) and containerization commands. No unauthorized or suspicious command executions (e.g., sudo, shell injections) are present.
  • [DATA_EXFILTRATION]: While the 'memory' server implementation handles data persistence via a local knowledge graph, it is clearly documented for this purpose and does not attempt to send data to external or untrusted domains. It uses local file system storage for session memory.
  • [PROMPT_INJECTION]: The instructions in SKILL.md focus on providing structural guidance to the model (e.g., 'The Server Does NOT Reason'). These are architectural constraints intended to optimize model performance and do not attempt to bypass safety filters or override core instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 01:06 PM