mcp-z-client
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides examples of spawning local MCP server processes as part of its core functionality for managing stdio-based servers.
- Evidence:
resources/automated-testing.mddemonstrates spawning a server usingprocess.execPathwithbin/server.js. - Evidence:
resources/spawn-local-server.mddemonstrates spawning a server usingprocess.execPathwithmy-mcp-server.js. - [EXTERNAL_DOWNLOADS]: The documentation references a public MCP server endpoint for a well-known service for demonstration purposes.
- Evidence:
resources/connect-public-server.mdandresources/discover-capabilities.mdreferencehttps://ai.todoist.net/mcp. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external MCP servers into the agent's context, which is the primary function of an MCP client library.
- Ingestion points:
client.callTool(),client.getPrompt(), andclient.readResource()inSKILL.mdallow the agent to receive data from external servers. - Boundary markers: The documentation in
SKILL.mdmentions response wrappers that handle MCP results and throw typed errors for incompatible content. - Capability inventory: The skill can execute local commands (via registry config), make network calls (to HTTP servers), and access configuration files (like
.mcp.json). - Sanitization: The skill describes the use of convenience methods and response wrappers to handle server outputs.
Audit Metadata