mcp-server-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is an educational resource providing documentation and boilerplate code for creating MCP servers. It does not contain any malicious patterns or functional code that executes automatically.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices for secret management, instructing users to use environment variables like GITHUB_TOKEN and providing explicit placeholders such as 'your-api-key' for configuration.
- [EXTERNAL_DOWNLOADS]: All suggested dependencies are standard, legitimate development packages from the npm registry, including the official @modelcontextprotocol/sdk and zod for validation.
- [INDIRECT_PROMPT_INJECTION]: The templates provided demonstrate the use of strict schema validation with Zod and role-based message structures, which are key mitigations for securely handling untrusted user input within tool arguments.
Audit Metadata