mcp-server-security
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a defensive security utility that provides guidance and automated checks for hardening MCP implementations against industry-recognized attack vectors.
- [COMMAND_EXECUTION]: The included Python script (
scripts/security_checklist.py) usessubprocess.runto interact withgitfor the purpose of identifying files to audit. The implementation follows security best practices by using argument lists rather than shell strings, preventing command injection. - [EXTERNAL_DOWNLOADS]: The skill references technical documentation from trusted and well-known organizations, including the official Model Context Protocol site, the NSA, and OWASP. These references are used for informational purposes and do not involve remote code execution.
Audit Metadata