mcp-resource-exposure-patterns
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and code templates for Model Context Protocol (MCP) resources, focusing on secure implementation practices and proper architectural design.
- [SAFE]: The code snippets include explicit security validation patterns, such as path traversal prevention using
Path.resolve()and verification againstallowed_rootsusingis_relative_to. - [SAFE]: The skill correctly differentiates between read-only 'Resources' and action-oriented 'Tools', encouraging developers to follow the principle of least privilege.
- [SAFE]: Dependencies are limited to standard Python libraries or well-known, reputable packages like
pydanticandaiofiles. - [SAFE]: External links reference official protocol specifications (modelcontextprotocol.io), established documentation (IETF RFCs), and the official GitHub repository for the
aiofileslibrary.
Audit Metadata