matlab-mcp-server
Fail
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download pre-compiled binaries from an external GitHub organization (
github.com/matlab) that is not identified as a trusted or official software vendor source. - Evidence:
curl -L -o ~/Downloads/matlab-mcp-server https://github.com/matlab/matlab-mcp-server/releases/latest/download/matlab-mcp-server-macos-amd64 - [COMMAND_EXECUTION]: Instructions include modifying file permissions to make downloaded external binaries executable on the host system.
- Evidence:
chmod +x ~/Downloads/matlab-mcp-server - [REMOTE_CODE_EXECUTION]: The skill facilitates installation via
go install, which downloads, compiles, and executes source code from a remote repository at runtime. - Evidence:
go install github.com/matlab/matlab-mcp-server/cmd/matlab-mcp-server@latest - [COMMAND_EXECUTION]: The skill exposes tools (
execute_matlab_code,evaluate_matlab_expression) that allow an AI agent to execute arbitrary MATLAB code. This represents a powerful capability that can be used to interact with the local file system, network, and system shell (via MATLAB's!operator). - Context: While central to the skill's purpose, this access surface constitutes a high-risk capability if the agent is influenced by malicious indirect prompt injections.
Recommendations
- AI detected serious security threats
Audit Metadata