mongodb-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
env | grepto check for existing configuration. It implements a security-conscious approach by piping the output tosedto mask any existing credential values before they are displayed in the agent's context. - [COMMAND_EXECUTION]: Executes standard diagnostic commands such as
docker infoandecho $SHELLto tailor setup instructions to the user's local environment. - [DATA_EXFILTRATION]: No exfiltration patterns detected. The skill specifically instructs users to store credentials in a local file (
~/.mcp-env) and explicitly warns against sharing these secrets with the AI agent. - [PRIVILEGE_ESCALATION]: Recommends the use of
chmod 600for the credential file. This is a security hardening measure that ensures sensitive configuration is only readable by the owner, rather than an attempt to escalate privileges. - [EXTERNAL_DOWNLOADS]: References official documentation and download links for well-known services including MongoDB Atlas and Docker. These are documented neutrally as trusted resources for the setup process.
Audit Metadata