capawesome-mcp

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions emphasize secure handling of API tokens. It explicitly warns the agent to never write tokens into Git-tracked files and provides configuration examples for VS Code and environment variables that keep secrets out of the codebase.
  • [EXTERNAL_DOWNLOADS]: The skill connects to mcp.capawesome.io to provide documentation and cloud management features. These resources originate from the official vendor domain (capawesome.io) and are necessary for the skill's primary function.
  • [COMMAND_EXECUTION]: The skill provides standard setup commands for various MCP clients (Claude Code, Claude Desktop, Cursor, VS Code). These commands, such as claude mcp add and npx mcp-remote, are standard procedures for registering MCP servers and do not perform unauthorized or malicious actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 08:41 AM