mcp-builder
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/connections.pyfile implements anMCPConnectionStdioclass that uses thestdio_clientto spawn subprocesses. This is a core feature of the skill, designed to launch and test local MCP servers provided by the user. - [EXTERNAL_DOWNLOADS]: The
SKILL.mddocumentation references official Model Context Protocol resources onmodelcontextprotocol.ioand the official GitHub repositories of themodelcontextprotocolorganization. These are well-known, trusted sources for the protocol's specifications and SDKs. - [INDIRECT_PROMPT_INJECTION]: The evaluation script
scripts/evaluation.pyingests task questions from a user-supplied XML file and interpolates them into the agent's prompt. While this presents an ingestion point for untrusted data, the script is a testing tool where processing diverse queries is the intended functionality. - Ingestion points:
scripts/evaluation.pyreads data from theeval_fileXML positional argument. - Boundary markers: None identified; question text is directly assigned to the message content.
- Capability inventory: The script can execute tools on connected MCP servers and interact with the Anthropic API.
- Sanitization: None; the script assumes the evaluation file is provided by the developer for testing their own server.
Audit Metadata