mcp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to fetch documentation and SDK README files from official Model Context Protocol (MCP) sources.
- Official documentation:
https://modelcontextprotocol.io/sitemap.xml - SDK documentation:
https://raw.githubusercontent.com/modelcontextprotocol/typescript-sdk/main/README.mdandhttps://raw.githubusercontent.com/modelcontextprotocol/python-sdk/main/README.md - [COMMAND_EXECUTION]: The
evaluation.pyscript is designed to launch MCP servers using local shell commands as part of a developer's testing workflow. - Evidence: The script accepts
-c(command) and-a(args) parameters to initiate server processes for evaluation. - [DYNAMIC_EXECUTION]: The
connections.pyutility supports the dynamic execution of local server binaries to establish communication via the standard input/output (stdio) transport. - Evidence: The
MCPConnectionStdioclass uses themcplibrary'sstdio_clientto execute user-specified commands. - [INDIRECT_PROMPT_INJECTION]: The testing framework ingests data from external XML files and tool outputs, which constitutes a potential surface for indirect prompt injection.
- Evidence: The
agent_loopinscripts/evaluation.pyprocesses responses from external MCP tools and user-provided test questions, though this is a standard risk for agent-based testing tools.
Audit Metadata