mcp-builder
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Model Context Protocol specifications and SDK documentation from official sources, including modelcontextprotocol.io and the protocol's official GitHub repository. These sources are considered trusted and well-known for this domain.
- [COMMAND_EXECUTION]: The
scripts/connections.pyandscripts/evaluation.pyscripts facilitate the execution of local shell commands to support thestdiotransport mechanism. This allows the tool to launch and interact with MCP servers under development, which is a core feature of the protocol for local integration. - [DATA_EXFILTRATION]: The evaluation script handles sensitive configuration such as the
ANTHROPIC_API_KEYand custom headers. These credentials are provided by the user through standard environment variables or command-line arguments and are used only for the intended communication with the model provider or the MCP server under test. - [PROMPT_INJECTION]: The
scripts/evaluation.pyharness processes outputs from external MCP servers, creating a surface for indirect prompt injection. . Ingestion points: External data enters through tool call responses inagent_loop. . Boundary markers: TheEVALUATION_PROMPTenforces the use of XML tags (<summary>,<feedback>,<response>) to structure the model's output and distinguish it from external data. . Capability inventory: The script performs network calls to the Anthropic API and can execute local processes viastdio_client. . Sanitization: Content returned from tools is included in the conversation history without specific sanitization, relying on the structured XML output requirements to mitigate risks.
Audit Metadata