mcp-builder
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and SDK information from official and well-known sources, including the Model Context Protocol website and its associated GitHub repositories. These downloads are used to provide the agent with up-to-date protocol specifications.
- [COMMAND_EXECUTION]: The included evaluation harness (scripts/evaluation.py) executes local MCP server commands provided by the user via the command-line interface. This is intended functionality for developers to test their server implementations locally via standard input/output (stdio).
- [SAFE]: No hardcoded credentials, malicious persistence mechanisms, or obfuscation techniques were detected. The skill correctly instructs users to manage sensitive data like API keys through environment variables.
Audit Metadata