mcp-server-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides defensive configurations and code samples for securing MCP servers, including TLS termination and mTLS setup.
- [SAFE]: Authentication examples use standard protocols like OAuth 2.1 and promote secure secret management through environment variables.
- [SAFE]: Tool authorization logic implements allowlists and explicit role-based access control to prevent unauthorized tool execution.
- [SAFE]: Input validation strategies, such as JSON Schema enforcement and SQL/path traversal sanitization, are provided to mitigate injection attacks.
- [SAFE]: Deployment hardening examples include non-root Docker configurations, Kubernetes Network Policies, and Seccomp profiles for process isolation.
Audit Metadata