mcp-builder

Warn

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The evaluation script (scripts/evaluation.py) combined with the connection factory (scripts/connections.py) allows spawning arbitrary local subprocesses via StdioServerParameters using parameters specified at runtime (-c/--command and -a/--args). If an untrusted evaluation configuration is loaded, it could execute arbitrary local commands.
  • [EXTERNAL_DOWNLOADS]: The framework instructions in SKILL.md advise fetching data from remote links (e.g., modelcontextprotocol.io sitemaps and raw repository files from githubusercontent.com). While these point to the official specification website and known repositories, runtime network activity is dynamically triggered depending on the user workflow.
  • [DYNAMIC_EXECUTION]: The evaluation harness handles custom server instances dynamically via specific environment variable mappings (-e/--env) and structural configurations parsed from input XML documents, allowing dynamic binding to local or remote endpoints.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 14, 2026, 11:53 PM