ionic-framework-mcp
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to utilize the
@capawesome/ionic-framework-mcppackage from the official npm registry when configuring clients that require local command execution via stdio. - [COMMAND_EXECUTION]: The instructions involve running shell commands such as
claude mcp addandnpxto register the MCP server with the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest documentation and component examples from a remote hosted server (
ionic-framework-mcp.capawesome.io), which presents a surface for potential indirect instructions. - Ingestion points: Remote content is fetched into the agent's context through the
get_doc_pageandget_component_usagetools. - Boundary markers: There are no explicit delimiters defined to separate the fetched documentation from the agent's system instructions.
- Capability inventory: The skill leverages subprocess execution capabilities for initial client setup and server proxying.
- Sanitization: No specific sanitization or filtering logic is described for the content retrieved from the remote documentation server.
Audit Metadata