mcp-implementation-security-review
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate framework for performing security reviews. It does not contain any malicious instructions, prompt injections, or obfuscated content.
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard diagnostic commands such as
git grepto search for potentially dangerous code patterns (e.g.,exec,eval,subprocess) in source code. These operations are restricted to static analysis of local files within the agent's provided environment. - [EXTERNAL_DOWNLOADS]: The metadata references 'github/awesome-copilot' as a source of origin. This reference to a well-known service is for documentation purposes and does not involve automated downloads of untrusted code.
Audit Metadata