mcp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/evaluation.pyscript executes a user-specified command (the MCP server) using themcplibrary'sstdio_clientfunctionality. This is a fundamental component of the evaluation harness intended for testing local servers and follows the developer's provided parameters.\n- [EXTERNAL_DOWNLOADS]: The skill instructions recommend fetching official documentation and SDK README files from themodelcontextprotocol.iodomain and themodelcontextprotocolorganization on GitHub to ensure up-to-date protocol information.\n- [INDIRECT_PROMPT_INJECTION]: Thescripts/evaluation.pyharness processes external test questions from XML files and dynamically handles outputs from the MCP tools being tested, which is an inherent part of the evaluation process for LLM-based tools.\n - Ingestion points: The script reads evaluation questions from local XML files and processes responses from both the Anthropic API and the tools provided by the MCP server under test.\n
- Boundary markers: The assistant is instructed via the system prompt to use specific XML-style tags (
<summary>,<feedback>,<response>) to structure its output and isolate the final answer.\n - Capability inventory: The script utilizes the Anthropic Python SDK for agent interactions, performs network connections (via SSE/HTTP), and manages subprocesses (via Stdio).\n
- Sanitization: Input XML is parsed using the standard
xml.etree.ElementTreelibrary, and output processing relies on regex for tag extraction.
Audit Metadata