mcp-gateway-security
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide and does not contain any executable scripts, shell commands, or automated tasks.
- [SAFE]: Instructions regarding token management correctly advocate for secure practices, such as using environment variables and secret managers instead of hardcoded credentials.
- [SAFE]: External references are restricted to well-known documentation sites (GitHub, OWASP, MCP) and the vendor's own repository (Hack23/ISMS-PUBLIC), which is consistent with the skill's purpose.
- [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were identified. The threat model provided is purely educational and for risk assessment purposes.
Audit Metadata