create-mcp-servers
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-quality guidance and automation for creating MCP servers. It incorporates strong security principles, including instructions on how to avoid hardcoding secrets by using environment variables and shell profile configuration.- [SAFE]: Secure secrets management is a core principle, providing instructions for using environment variables, variable expansion in configs, and a dedicated ~/.mcp_secrets file with restricted permissions (chmod 600).- [SAFE]: The skill provides templates for both Python and TypeScript that include automated input validation (Pydantic and Zod) to mitigate injection and path traversal risks in the created servers.- [SAFE]: Automation scripts for project setup follow best practices, using isolated environments (uv, npm) and absolute paths for tool invocation.- [SAFE]: Troubleshooting guides and workflows include validation checkpoints to ensure the resulting servers are correctly configured and connected without exposing sensitive credentials in logs or conversations.
Audit Metadata