mcp-tool-creator
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to validate the syntax of generated scripts (using
python3 -cornode --check) and to manage the installation of required dependencies. - [EXTERNAL_DOWNLOADS]: It downloads and installs official Model Context Protocol libraries from standard registries (PyPI and NPM) to ensure the generated server can function.
- [COMMAND_EXECUTION]: The generated MCP server is designed to execute
docker composecommands. The templates utilize safe execution patterns, such asasyncio.create_subprocess_execin Python andexecFilein Node.js, which avoid shell spawning and mitigate command injection risks from tool arguments. - [PROMPT_INJECTION]: The skill processes untrusted project data from
docker-compose.yml(Step 1) to identify services and generate tool definitions. This represents an indirect prompt injection surface where a malicious configuration file could attempt to influence the generated code, though the impact is limited to the local development environment.
Audit Metadata