mcp-developer
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and scaffolding tool for MCP development. It incorporates security-first instructions, including mandatory input validation with Zod and Pydantic to ensure protocol compliance and safety.
- [EXTERNAL_DOWNLOADS]: References standard, well-known development libraries and tools including
@modelcontextprotocol/sdk,mcp,zod,pydantic, andhttpx. These are industry-standard dependencies for the described task and do not pose a security risk in this context. - [COMMAND_EXECUTION]: Provides examples of common development CLI operations such as
npx,npm install, andpip installto set up environments and run the MCP inspector for verification. - [DATA_EXPOSURE]: Includes explicit guidelines against hardcoding credentials and provides implementation patterns for safe file system access that include path traversal checks (e.g., ensuring paths are within allowed directories).
Audit Metadata