mcp-setup
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of MCP server implementations from the NPM registry.
- [REMOTE_CODE_EXECUTION]: The skill utilizes
npxto execute code for various MCP servers. All identified packages originate from well-known services (Sentry, PostHog, Neon) or trusted organizations (Anthropic, Model Context Protocol). - [COMMAND_EXECUTION]: The skill provides instructions for using the
claudeCLI to add, list, and manage MCP server configurations. - [DATA_EXFILTRATION]: Instructions mention the use of environment variables for API keys and reference local configuration files (
~/.claude/settings.json) as part of the intended setup process. It includes explicit guidance on avoiding the storage of sensitive tokens in version-controlled files.
Audit Metadata