mcp-vstash
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
vstashPython package viapip install vstash. This is a core dependency and a resource associated with the tool's primary functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files, directories, and external URLs which are ingested into memory for semantic search and Q&A.
- Ingestion points: The
vstash_addtool inSKILL.mdandreferences/mcp-reference.mdaccepts paths and URLs for document ingestion. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are specified in the provided documentation.
- Capability inventory: The skill includes capabilities for reading local files and fetching data from remote URLs (
vstash_add), and exporting processed data (vstash_export) as seen inreferences/mcp-reference.md. - Sanitization: No specific sanitization or filtering of the ingested content is documented.
Audit Metadata