mcp-server-testing
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and uses official Model Context Protocol tools via
npx, specifically@modelcontextprotocol/inspectorand@modelcontextprotocol/conformance. These are well-known packages from a trusted ecosystem.- [COMMAND_EXECUTION]: The instructions involve executing standard build and test commands such astsc,py_compile,npx, anduv. It also runs a provided Python script to lint evaluation data. These commands are consistent with the skill's primary purpose of software testing.- [INDIRECT_PROMPT_INJECTION]: Thescripts/lint_eval_suite.pyscript ingests and parses user-generated XML and JSON files. While this creates a surface for processing untrusted data, the script is restricted to static linting and regex-based analysis, minimizing the risk of instruction execution. - Ingestion points: The
lint_eval_suite.pyscript reads user-providedevals.xmlorevals.jsonfiles. - Boundary markers: None specific to the script's input files beyond the expected XML/JSON structure.
- Capability inventory: The script performs file reading and parsing; the skill overall instructs on command execution for server testing.
- Sanitization: The script uses standard Python
jsonandxml.etree.ElementTreeparsers.
Audit Metadata