fastmcp

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the fastmcp and httpx Python packages via pip to enable server development and network request capabilities.
  • [INDIRECT_PROMPT_INJECTION]: The provided server templates create an attack surface for indirect prompt injection by design, as they are intended to ingest and process external data.
  • Ingestion points: templates/file_processor.py (accepts file paths via summarize_text_file and search_text_file), templates/database_server.py (accepts raw SQL via the query tool), and templates/api_wrapper.py (fetches data from external REST APIs).
  • Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are present in the template strings.
  • Capability inventory: The templates utilize sqlite3 for database access, pathlib for file system reads, and httpx for network communication.
  • Sanitization: The database template implements basic protection by enforcing a SELECT statement prefix and using regular expressions for table name validation. The file processor uses expanduser() but does not implement strict path sandboxing.
  • [COMMAND_EXECUTION]: The skill uses the fastmcp CLI and Python scripts to perform development tasks such as project scaffolding (scripts/scaffold_fastmcp.py), local server testing, and registration with MCP clients (e.g., Claude Code, Cursor). These operations are standard for a development toolset.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 04:02 PM