mcp-builder
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Subprocess Execution for Protocol Support]: The scripts in the
scripts/directory provide the ability to run local commands as subprocesses. This functionality is a fundamental part of the Model Context Protocol (MCP) for connecting to servers via standard input/output streams. - [External Resource Integration]: The skill documentation includes references to the official MCP website and GitHub repositories for fetching implementation details and SDK documentation. This is a common practice for providing up-to-date developer resources and does not involve executing untrusted remote code.
- [Network Connectivity for Evaluation]: The evaluation script facilitates connections to the Anthropic API and remote MCP servers via HTTP or Server-Sent Events (SSE). This connectivity is necessary for the skill's primary function of testing and validating MCP server implementations. Users are expected to manage their own API keys via environment variables according to standard security practices.
Audit Metadata