formio-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
@formio/mcppackage from the npm registry using thenpxcommand. This is consistent with the vendor's provided tools for MCP server deployment. - [REMOTE_CODE_EXECUTION]: The use of
npx -y @formio/mcpresults in the execution of code downloaded from a remote registry at runtime. This behavior is documented and represents the intended functionality for the@formioenvironment. - [COMMAND_EXECUTION]: The skill executes shell commands to configure project settings via
project setandproject get. It also writes workspace-relative configuration files, such as.mcp.json,.cursor/mcp.json,.vscode/mcp.json, and.codex/config.toml, to enable the MCP server across different platforms.
Audit Metadata