http_mcp_headers
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides architectural guidance and implementation details for the secure handling of secrets in HTTP headers for MCP servers. It correctly uses GitHub Actions secret syntax (e.g.,
${{ secrets.DD_API_KEY }}) as placeholders for sensitive data, ensuring that secrets are injected into the environment at runtime rather than being hardcoded in configuration files. - [SAFE]: The skill contains no executable code or scripts, serving purely as a documentation reference for developers implementing the Model Context Protocol transport layer.
- [SAFE]: The external URL reference (datadoghq.com) belongs to a well-known service and is used solely as a configuration example for a legitimate MCP server endpoint.
Audit Metadata