skills/keboola/ai-kit/mcp-data-app/Gen Agent Trust Hub

mcp-data-app

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a scaffold.sh script designed to automate the copying of a template project structure into the user's workspace. It also provides guidance for using standard CLI tools such as git, uv, and kbagent to manage project deployment and repository operations.
  • [EXTERNAL_DOWNLOADS]: The pyproject.toml file fetches the keboola-mcp-server package directly from the vendor's GitHub repository. This is a standard dependency for the server's operation.
  • [REMOTE_CODE_EXECUTION]: The skill's setup process involves the uv sync command, which installs Python dependencies from defined sources. Additionally, the reference documentation provides examples of using npx to execute tools like supergateway for bridging stdio-based MCP servers to HTTP, which involves downloading and running packages from the npm registry at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 02:45 PM
Security Audit — agent-trust-hub — mcp-data-app