mcp-server-security

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a defensive security utility that provides guidance and automated checks for hardening MCP implementations against industry-recognized attack vectors.
  • [COMMAND_EXECUTION]: The included Python script (scripts/security_checklist.py) uses subprocess.run to interact with git for the purpose of identifying files to audit. The implementation follows security best practices by using argument lists rather than shell strings, preventing command injection.
  • [EXTERNAL_DOWNLOADS]: The skill references technical documentation from trusted and well-known organizations, including the official Model Context Protocol site, the NSA, and OWASP. These references are used for informational purposes and do not involve remote code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 10:44 AM
Security Audit — agent-trust-hub — mcp-server-security