build-mcpb
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- Security Best Practices: The skill features a dedicated security reference guide (
local-security.md) that instructs developers on preventing path traversal, avoiding shell command injection, and implementing resource limits. This educational focus proactively addresses common vulnerabilities in local integrations. - Trusted Resource References: The instructions utilize official tools and schemas from recognized development organizations, such as
@anthropic-aiand@modelcontextprotocol, ensuring the build process relies on established and verifiable resources. - Secure Data Management: Provides clear guidance on handling sensitive information, including instructions on using the OS keychain for secrets and avoiding the exposure of credentials in logs or tool outputs.
- Minimal Privilege Design: Encourages developers to split read and write capabilities and use tool annotations to ensure the host application can provide appropriate user warnings for destructive actions.
Audit Metadata