mcp-connector-tester
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes tool metadata and execution results from external MCP servers, creating a surface for indirect prompt injection.
- Ingestion points: The skill is designed to fetch tool lists and call functions from external servers using the
manus-mcp-clitool, as described inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore commands that may be embedded within descriptions or outputs from external servers.
- Capability inventory: The skill allows the agent to execute shell commands and write documentation to local files based on external input.
- Sanitization: No instructions are provided to sanitize or escape data retrieved from external servers before it is interpolated into the agent's context or documentation.
- [COMMAND_EXECUTION]: The skill relies on executing a specific command-line utility to interact with the environment.
- Evidence:
SKILL.mdandUSAGE.mdinstruct the agent to executemanus-mcp-clifor listing tools, checking authentication status, and calling MCP tools. This is the primary mechanism for the skill's functionality.
Audit Metadata