skills/microsoft/hve-core/owasp-mcp/Gen Agent Trust Hub

owasp-mcp

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • Educational Security Reference: The skill provides structured documentation regarding the OWASP MCP Top 10 security risks. It is designed to assist in identifying and remediating vulnerabilities rather than performing them.
  • Descriptive Attack Patterns: The reference files include examples of malicious payloads, such as prompt injection strings and command injection techniques. These are clearly marked as example attack scenarios for documentation purposes and are not functional instructions intended for the agent to execute.
  • Absence of Executable Scripts: No executable code, shell scripts, or binaries are included in the skill. The files are restricted to Markdown documentation and metadata, minimizing the risk of unauthorized command execution.
  • No Remote Dependencies or Connectivity: The skill does not define any external package dependencies or perform network operations, such as fetching remote scripts or configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 05:55 AM