mcp-api-build
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a high-quality educational and reference tool for API development. It includes detailed security checklists and defensive patterns for both REST and MCP architectures.
- [DATA_EXPOSURE_&_EXFILTRATION]: No sensitive data or hardcoded credentials were found. Code examples correctly demonstrate the use of environment variables for handling API keys, which is a security best practice.
- [REMOTE_CODE_EXECUTION]: The skill references standard, well-known developer tools such as
@stoplight/prism-cli,@stoplight/spectral-cli, and@modelcontextprotocol/inspectorvia npx. These are official tools from established organizations and do not represent a security risk. - [PROMPT_INJECTION]: The skill includes specific defensive guidance in its
security-production.mdreference file, advising developers to treat all tool inputs as untrusted and to implement validation and sanitization.
Audit Metadata