bgpt-paper-search

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill setup instructions suggest executing the bgpt-mcp and mcp-remote packages via npx. This pattern involves downloading and running code from the public npm registry at runtime.
  • [EXTERNAL_DOWNLOADS]: The skill depends on external resources, including the bgpt-mcp package and the remote server endpoint at https://bgpt.pro/mcp/sse, which are not from a verified trusted organization.
  • [COMMAND_EXECUTION]: The skill requires the execution of shell commands (npx) to configure and launch the remote MCP server integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 01:29 PM