mcp-builder
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility
scripts/connections.pyand the evaluation harnessscripts/evaluation.pyenable the execution of local shell commands to interact with MCP servers via thestdiotransport. This functionality is the intended mechanism for testing locally developed servers within the framework. - [INDIRECT_PROMPT_INJECTION]: The test harness
scripts/evaluation.pycreates a potential surface for indirect prompt injection by parsing external XML files and integrating tool outputs from MCP servers into prompts sent to the LLM. - Ingestion points: The script
scripts/evaluation.pyparses evaluation questions and answers from a user-specified XML file. - Boundary markers: The system prompt in
scripts/evaluation.pyuses XML-style tags (<summary>,<feedback>,<response>) to separate model reasoning from the final answer. - Capability inventory: The toolkit includes subprocess execution (
scripts/connections.py), network access to the Anthropic API (scripts/evaluation.py), and the ability to connect to remote HTTP/SSE servers (scripts/connections.py). - Sanitization: Data from the evaluation XML and tool results are interpolated into prompts without explicit escaping or sanitization.
- [EXTERNAL_DOWNLOADS]: The skill fetches protocol documentation and SDK README files from the official Model Context Protocol website and GitHub repositories. These are well-known and established sources for developers using the protocol.
Audit Metadata