mcp-builder
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation script (
scripts/evaluation.py) combined with the connection factory (scripts/connections.py) allows spawning arbitrary local subprocesses viaStdioServerParametersusing parameters specified at runtime (-c/--commandand-a/--args). If an untrusted evaluation configuration is loaded, it could execute arbitrary local commands. - [EXTERNAL_DOWNLOADS]: The framework instructions in
SKILL.mdadvise fetching data from remote links (e.g.,modelcontextprotocol.iositemaps and raw repository files fromgithubusercontent.com). While these point to the official specification website and known repositories, runtime network activity is dynamically triggered depending on the user workflow. - [DYNAMIC_EXECUTION]: The evaluation harness handles custom server instances dynamically via specific environment variable mappings (
-e/--env) and structural configurations parsed from input XML documents, allowing dynamic binding to local or remote endpoints.
Audit Metadata