simplenote-mcp
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell pipelines and the npx utility to facilitate stdio-based communication with the Simplenote MCP server.
- [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the @automattic/simplenote-mcp package from the npm registry. This package is provided by a well-known service organization.
- [PROMPT_INJECTION]: The skill facilitates indirect prompt injection by retrieving and displaying note content without sanitization.
- Ingestion points: Note content is ingested via the list_notes, search_notes, and get_note tools defined in SKILL.md.
- Boundary markers: There are no boundary markers or instructions provided to the agent to ignore potentially malicious instructions embedded in the note content.
- Capability inventory: The skill environment supports shell command execution and Python script execution.
- Sanitization: No escaping or filtering is applied to the note content before it is processed by the agent.
Audit Metadata