fastmcp-threading
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains a Python code snippet that initiates a network-accessible Flask web server using
app.run().\n- [DATA_EXFILTRATION]: The Flask server is configured withhost="0.0.0.0", making it reachable from any IP address on the network. Binding a management interface to all interfaces without authentication or access controls poses a risk of unauthorized access to the host environment or data.
Audit Metadata