mcp
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a reference for implementing Model Context Protocol (MCP) servers and FastAPI integrations. All dependencies mentioned (FastAPI, FastMCP, Pydantic, Uvicorn) are well-known and standard in the Python ecosystem.
- [COMMAND_EXECUTION]: The skill provides instructions for running servers via the command line (e.g., using
python -manduvicorn). These are standard operations for the described development workflow. - [PROMPT_INJECTION]: The architecture describes ingestion points for external data that will be processed by an agent, which is a common surface for indirect prompt injection.
- Ingestion points: The
messageargument in thesend_to_agenttool and theMessageRequestPydantic model in the FastAPI POST endpoint (found inSKILL.md). - Boundary markers: The provided snippets do not include explicit delimiters or instructions to ignore instructions within the message body.
- Capability inventory: Messages are passed to
agent.receive_message, which executes within the agent's logic context. - Sanitization: No input sanitization or validation is demonstrated in the boilerplate code.
Audit Metadata