moda-mcp
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill connects to official vendor domains (
moda.app,mcp.moda.app,docs.moda.app) for design services and documentation. These resources are consistent with the skill's stated purpose and author. - [EXTERNAL_DOWNLOADS]: The skill documents tools for uploading assets (
upload_file,create_upload_url) and exporting designs (export_canvas). These tools are restricted to communicating with the Moda infrastructure or processing user-provided public URLs for design content. - [SAFE]: The skill contains Python-style pseudocode within documentation files (e.g.,
recipes/bulk-variants.md) to illustrate complex logic for the agent, such as windowed execution for bulk tasks. These are instructional examples and do not involve executing untrusted or hidden scripts. - [SAFE]: Mention of API key formats (e.g.,
moda_live_...) is used for illustrative purposes in the documentation and does not contain hardcoded secrets.
Audit Metadata