mcp-server-foundations
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/create_server.pyutilizessubprocess.runto executeuvcommands for project initialization and dependency management. These calls use fixed argument lists rather than shell strings, which is a secure implementation for automation. - [COMMAND_EXECUTION]: The skill includes a scaffolding utility that writes Python code to the local file system based on a template. While it incorporates a user-supplied project name into the generated file, the operations are limited to the local environment and intended for developer productivity.
Audit Metadata