fastmcp
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
fastmcpandhttpxPython packages viapipto enable server development and network request capabilities. - [INDIRECT_PROMPT_INJECTION]: The provided server templates create an attack surface for indirect prompt injection by design, as they are intended to ingest and process external data.
- Ingestion points:
templates/file_processor.py(accepts file paths viasummarize_text_fileandsearch_text_file),templates/database_server.py(accepts raw SQL via thequerytool), andtemplates/api_wrapper.py(fetches data from external REST APIs). - Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are present in the template strings.
- Capability inventory: The templates utilize
sqlite3for database access,pathlibfor file system reads, andhttpxfor network communication. - Sanitization: The database template implements basic protection by enforcing a
SELECTstatement prefix and using regular expressions for table name validation. The file processor usesexpanduser()but does not implement strict path sandboxing. - [COMMAND_EXECUTION]: The skill uses the
fastmcpCLI and Python scripts to perform development tasks such as project scaffolding (scripts/scaffold_fastmcp.py), local server testing, and registration with MCP clients (e.g., Claude Code, Cursor). These operations are standard for a development toolset.
Audit Metadata