mcp-builder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch the latest protocol specifications and SDK documentation from official sources, specifically
modelcontextprotocol.ioand the associated GitHub repositories. These are well-known resources for the Model Context Protocol. - [COMMAND_EXECUTION]: The evaluation harness provided in
scripts/evaluation.pyandscripts/connections.pyallows the user to execute local shell commands to launch and test MCP servers. This is an intended and documented feature for developers to test their implementations. - [INDIRECT_PROMPT_INJECTION]: The evaluation script ingests questions from user-provided XML files and interpolates them into a prompt template for the LLM. While this is an attack surface for prompt injection, it is a standard design for an evaluation utility, and the script does not perform any autonomous actions without user invocation.
Audit Metadata