mcp-data-app
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a
scaffold.shscript designed to automate the copying of a template project structure into the user's workspace. It also provides guidance for using standard CLI tools such asgit,uv, andkbagentto manage project deployment and repository operations. - [EXTERNAL_DOWNLOADS]: The
pyproject.tomlfile fetches thekeboola-mcp-serverpackage directly from the vendor's GitHub repository. This is a standard dependency for the server's operation. - [REMOTE_CODE_EXECUTION]: The skill's setup process involves the
uv synccommand, which installs Python dependencies from defined sources. Additionally, the reference documentation provides examples of usingnpxto execute tools likesupergatewayfor bridging stdio-based MCP servers to HTTP, which involves downloading and running packages from the npm registry at runtime.
Audit Metadata