mcp-server-skills

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill is primarily documentation and architectural patterns for building a Model Context Protocol (MCP) server. The provided TypeScript code snippets implement a simple dice-rolling utility without any dangerous system access or network operations.
  • [EXTERNAL_DOWNLOADS]: The skill references development tools and libraries from well-known sources, including the mcp-handler and mcp-remote packages on the NPM registry, and a reference repository on GitHub (gocallum/rolldice-mcpserver) which is owned by the skill author. These references are used for standard integration and development purposes.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern for processing external input through a tool interface.
  • Ingestion points: The sides argument in the rollDice function within lib/dice.ts.
  • Boundary markers: The implementation explicitly uses a Zod schema (z.number().int().min(2)) to enforce strict type and range validation on incoming data.
  • Capability inventory: The implemented logic is limited to mathematical randomization and string formatting; it does not possess file system, network, or subprocess execution capabilities.
  • Sanitization: Input is validated via diceSchema.parse(sides) before being processed by the application logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:35 PM