mcp-developer

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational and scaffolding tool for MCP development. It incorporates security-first instructions, including mandatory input validation with Zod and Pydantic to ensure protocol compliance and safety.
  • [EXTERNAL_DOWNLOADS]: References standard, well-known development libraries and tools including @modelcontextprotocol/sdk, mcp, zod, pydantic, and httpx. These are industry-standard dependencies for the described task and do not pose a security risk in this context.
  • [COMMAND_EXECUTION]: Provides examples of common development CLI operations such as npx, npm install, and pip install to set up environments and run the MCP inspector for verification.
  • [DATA_EXPOSURE]: Includes explicit guidelines against hardcoding credentials and provides implementation patterns for safe file system access that include path traversal checks (e.g., ensuring paths are within allowed directories).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 01:36 AM