build-mcpb

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • Security Best Practices: The skill features a dedicated security reference guide (local-security.md) that instructs developers on preventing path traversal, avoiding shell command injection, and implementing resource limits. This educational focus proactively addresses common vulnerabilities in local integrations.
  • Trusted Resource References: The instructions utilize official tools and schemas from recognized development organizations, such as @anthropic-ai and @modelcontextprotocol, ensuring the build process relies on established and verifiable resources.
  • Secure Data Management: Provides clear guidance on handling sensitive information, including instructions on using the OS keychain for secrets and avoiding the exposure of credentials in logs or tool outputs.
  • Minimal Privilege Design: Encourages developers to split read and write capabilities and use tool annotations to ensure the host application can provide appropriate user warnings for destructive actions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 05:20 PM