mcp-server-skills
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is primarily documentation and architectural patterns for building a Model Context Protocol (MCP) server. The provided TypeScript code snippets implement a simple dice-rolling utility without any dangerous system access or network operations.
- [EXTERNAL_DOWNLOADS]: The skill references development tools and libraries from well-known sources, including the
mcp-handlerandmcp-remotepackages on the NPM registry, and a reference repository on GitHub (gocallum/rolldice-mcpserver) which is owned by the skill author. These references are used for standard integration and development purposes. - [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for processing external input through a tool interface.
- Ingestion points: The
sidesargument in therollDicefunction withinlib/dice.ts. - Boundary markers: The implementation explicitly uses a Zod schema (
z.number().int().min(2)) to enforce strict type and range validation on incoming data. - Capability inventory: The implemented logic is limited to mathematical randomization and string formatting; it does not possess file system, network, or subprocess execution capabilities.
- Sanitization: Input is validated via
diceSchema.parse(sides)before being processed by the application logic.
Audit Metadata