mcp-builder

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): Analysis of the skill documentation and associated scripts found no indicators of malicious activity, obfuscation, or unauthorized data access. The skill serves a legitimate educational and technical purpose.\n- [COMMAND_EXECUTION] (SAFE): The file scripts/connections.py provides a factory for creating connections to MCP servers, including via stdio. This involves executing commands to spawn local server processes. This behavior is a fundamental part of the Model Context Protocol and is implemented using the official mcp library.\n- [INDIRECT_PROMPT_INJECTION] (SAFE): The SKILL.md guide instructs the agent to fetch documentation from external sources such as modelcontextprotocol.io and GitHub. While this is an ingestion surface for untrusted content, it is required for the skill's primary purpose of research and planning.\n
  • Ingestion points: WebFetch calls to documentation URLs mentioned in Phase 1 of the implementation workflow.\n
  • Boundary markers: None; the agent is expected to synthesize technical documentation directly.\n
  • Capability inventory: Local command execution via stdio (in connections.py) and file system access for project setup.\n
  • Sanitization: None; standard LLM processing is utilized for the fetched markdown content.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:12 PM