mcp-health-checker
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script uses
subprocess.Popento run commands defined in the user's MCP configuration files. This is used to verify that local tool servers are functioning correctly.\n- [EXTERNAL_DOWNLOADS]: The skill performs network probes to HTTP endpoints defined in the server configuration to verify the availability of remote services.\n- [DYNAMIC_EXECUTION]: The health check process involves spawning server processes and sending initialization sequences to verify their internal state and exposed capabilities.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes local configuration data from files likemcp.yaml. If these files contain malicious input, the skill would execute the specified commands or visit the specified URLs. This is an inherent property of monitoring configuration files, and the script uses list-based execution to mitigate standard shell injection risks.
Audit Metadata