mcp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The evaluation harness (
scripts/evaluation.py) processes input from XML files (qa_pairelements) which are interpolated into an LLM prompt. This creates a surface where instructions embedded in the evaluation data could influence the behavior of the agent being tested during the evaluation process. - [DYNAMIC_EXECUTION]: The connection utility (
scripts/connections.py) and evaluation script support astdiotransport mode that executes local commands to launch MCP servers. This is a functional requirement for testing local server implementations. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to fetch documentation and SDK information from official sources including
modelcontextprotocol.ioand themodelcontextprotocolGitHub organization. These are recognized sources for the protocol and are used to gather implementation details.
Audit Metadata