create-mcp-app
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone the official SDK repository (
https://github.com/modelcontextprotocol/ext-apps.git) into a temporary directory (/tmp/mcp-ext-apps). This allows the agent to access reference code and templates directly from the vendor's source code repository. - [COMMAND_EXECUTION]: The skill includes several shell commands for managing a development workflow, including querying the NPM registry for version information (
npm view), installing packages (npm install), and configuring project metadata (npm pkg set). These commands are standard for project scaffolding and use the vendor's official packages.
Audit Metadata