netlify-mcp-servers
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a framework for tools that process input from an AI agent, which represents a potential injection surface if the agent's context contains untrusted data.
- Ingestion points: Tool arguments defined in
netlify/functions/mcp.tsvia theserver.toolmethod. - Boundary markers: The skill advises using explicit instructions in tool descriptions to guide model behavior.
- Capability inventory: Logic is developer-defined; example provided uses read-only operations (
getItem). - Sanitization: Mandatory use of
zodfor strict schema validation of all inputs. - [EXTERNAL_DOWNLOADS]: Recommends installing standard, well-known libraries such as
@modelcontextprotocol/sdkandzodfrom the official NPM registry. - [COMMAND_EXECUTION]: Provides instructions for using standard development tools like
netlify-cliand the@modelcontextprotocol/inspectorfor local testing.
Audit Metadata