mcp
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance for .NET MCP implementations.
- Transport Hygiene: It correctly instructs developers to route logs and diagnostics to
stderrfor stdio-based servers, preventing corruption of the JSON-RPC protocol stream onstdout. - Input Validation: It provides explicit code patterns for path normalization and root-check validation (
Path.GetFullPath,fullPath.StartsWith) to prevent directory traversal attacks in tool and resource handlers. - Authorization: It leverages standard ASP.NET Core authentication middleware for HTTP-based servers and demonstrates per-operation authorization using
ClaimsPrincipalfor sensitive operations. - Safe External Resources: Code examples for client initialization use the official
@modelcontextprotocol/server-everythingpackage from the npm registry, which is an established industry standard for MCP testing and interoperability.
Audit Metadata