mcp-server-builder
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed as a developer utility to automate the creation of MCP servers. All file operations (reading specs and writing scaffolds) are performed based on explicit command-line arguments.
- [COMMAND_EXECUTION]: The script
scripts/openapi_to_mcp.pyfunctions as a code generator, creating Python (server.py) and TypeScript (server.ts) files. It correctly uses template strings to build these files. While the generation process is secure, it is a best practice to review the generated code as it incorporates descriptions and metadata directly from the user-provided OpenAPI specification. - [CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management. The provided server templates and guidance explicitly instruct developers to use environment variables for sensitive data like API tokens, rather than hardcoding them into the tool schemas or server code.
Audit Metadata