mcpc-mcp-client
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of the '@apify/mcpc' package via NPM or Bun, which is an official tool from a well-known service provider.
- [COMMAND_EXECUTION]: The skill describes how to execute MCP server commands and local scripts (e.g., using 'npx' or 'node') as defined in user-provided configuration files, which is the intended purpose of the client utility.
- [PROMPT_INJECTION]: As an MCP client, the tool processes data from external servers, creating an indirect prompt injection surface. Data ingestion occurs via 'tools-call' and 'resources-read' operations; while boundary markers and explicit sanitization are not detailed in the examples, this is a known architectural characteristic of the protocol handled by the agent's internal safety measures.
Audit Metadata