agency-mcp-builder
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official GitHub API (
api.github.com) and standard Model Context Protocol SDKs for TypeScript and Python. These are well-known services and trusted developer tools. - [COMMAND_EXECUTION]: Provides templates for executing MCP servers using standard runtimes (
nodefor TypeScript andpythonfor Python). These are typical patterns for the described functionality. - [CREDENTIALS_UNSAFE]: The instructions and code examples explicitly advocate for secure secret management, demonstrating the use of environment variables (e.g.,
os.environ['GITHUB_TOKEN']) rather than hardcoding credentials. - [REMOTE_CODE_EXECUTION]: No patterns of downloading and piping untrusted code to a shell or dynamic execution of remote scripts were found.
Audit Metadata