mcp-builder

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • COMMAND_EXECUTION (SAFE): The MCPConnectionStdio class enables communication with local MCP servers via standard input/output. This involves spawning a subprocess using the stdio_client from the official mcp Python SDK. This is the standard and intended implementation for local MCP tool integration.
  • EXTERNAL_DOWNLOADS (SAFE): The MCPConnectionSSE and MCPConnectionHTTP classes facilitate network connections to remote MCP servers. These connections are used for protocol-compliant communication (Model Context Protocol) and do not involve the download or execution of untrusted scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:40 PM