bgpt-paper-search
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill setup instructions suggest executing the
bgpt-mcpandmcp-remotepackages vianpx. This pattern involves downloading and running code from the public npm registry at runtime. - [EXTERNAL_DOWNLOADS]: The skill depends on external resources, including the
bgpt-mcppackage and the remote server endpoint athttps://bgpt.pro/mcp/sse, which are not from a verified trusted organization. - [COMMAND_EXECUTION]: The skill requires the execution of shell commands (
npx) to configure and launch the remote MCP server integration.
Audit Metadata