mcp-cli-scripts
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the 'tsx' package as a dependency and suggests execution via 'npx tsx'. The package 'tsx' is an established, widely-used utility within the Node.js ecosystem for running TypeScript directly.
- [COMMAND_EXECUTION]: The primary function of the skill is to facilitate the creation of executable CLI scripts. The instructions and templates provided (such as 'script-template.ts') correctly implement standard execution patterns using shebang lines.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a template for creating tools that process external data, which is a standard ingestion surface for command-line utilities.
- Ingestion points: The template 'templates/script-template.ts' includes a flag for input files ('--input').
- Boundary markers: The template defines the tool structure but does not include specific prompt delimiters, as it is a base for developer-authored logic.
- Capability inventory: The template provides code for file system writes via 'fs.writeFileSync'.
- Sanitization: The template outputs structured data (JSON/CSV) by default, but specific input sanitization is left to the individual tool developer.
Audit Metadata