mcp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references Model Context Protocol (MCP) documentation and SDKs from official sources including modelcontextprotocol.io and public GitHub repositories. These references are used to inform the agent about protocol specifications and best practices.
- [COMMAND_EXECUTION]: The guide includes instructions for standard development and testing commands, such as using
npm run buildfor compilation,npx @modelcontextprotocol/inspectorfor functional testing, andpython -m py_compilefor syntax validation. - [INDIRECT_PROMPT_INJECTION]: The skill suggests fetching documentation from external URLs to guide the implementation process. This creates a potential surface for indirect prompt injection if the external sources were compromised, though the targets are official project sites.
- Ingestion points: Instructions in SKILL.md (Phase 1.2, 1.3) fetch protocol specifications and SDK READMEs.
- Boundary markers: Absent. The skill does not explicitly instruct the agent to use delimiters or ignore embedded instructions when reading these docs.
- Capability inventory: The skill describes local project build commands (npm, python) and local testing via the MCP Inspector.
- Sanitization: None specified for the external documentation content.
Audit Metadata