setup-polar
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the Polar MCP server from
https://mcp.polar.shand the@polar-sh/clipackage via npm. These resources originate from the vendor's official domain. - [COMMAND_EXECUTION]: Instructs the user or agent to execute shell commands to configure the environment, including adding MCP servers (
claude mcp add), installing global npm packages, and using thepolarCLI to manage webhooks and authentication. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it ingests untrusted data from the Polar API to inform subsequent actions.
- Ingestion points: Product names, IDs, and organization details retrieved via MCP tools in Step 1, 4, and 5.
- Boundary markers: Not present; the skill does not explicitly delimit or sanitize the data retrieved from the API before using it in instructions or generated code.
- Capability inventory: Shell command execution (
claude mcp add,npm install,polar CLI), and local file modification (echo ... >> .env). - Sanitization: No evidence of input validation or escaping for the data retrieved from the API endpoints.
Audit Metadata