calibre-mcp-setup

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references downloads from the official Calibre website (calibre-ebook.com) and the author's GitHub repository (github.com/caelum29) for installation assets and documentation.
  • [REMOTE_CODE_EXECUTION]: It uses npx -y calibre-mcp and npm install @huggingface/transformers to deploy the server and its dependencies. These actions are standard for the skill's stated purpose of software installation.
  • [COMMAND_EXECUTION]: The skill executes diagnostic commands such as node --version, calibredb --version, and curl to localhost to verify the environment and local service availability.
  • [SAFE]: The skill exhibits good security hygiene by instructing the agent to guide the user through sensitive configuration steps (such as enabling write permissions or starting the Content Server) rather than performing them autonomously.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 06:00 PM
Security Audit — agent-trust-hub — calibre-mcp-setup