mcp
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [Dependency Management]: The skill references several packages from the
@json-renderecosystem and the official@modelcontextprotocol/sdk. These are standard libraries for building MCP servers and rendering dynamic UIs. - [File System Access]: The server implementation uses
fs.readFileSyncto load a local HTML file (dist/index.html). This is a routine operation for serving web assets and is used here to provide the UI for the MCP application. - [Command Execution Configuration]: The documentation provides configuration examples for tools like Cursor and Claude that use
npx tsxto launch the server. This is a standard method for executing local TypeScript scripts in a development or integration environment. - [Cross-Origin Communication]: The client implementation utilizes
postMessageto communicate between the host application and the iframe-based UI, which is the expected architectural pattern for secure, isolated UI rendering in this context.
Audit Metadata