mcp-builder
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/connections.pyandscripts/evaluation.pyscripts enable the execution of local shell commands via thestdiotransport to launch and manage MCP servers during testing. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile directs the agent to fetch protocol specifications and SDK documentation from official sources, includingmodelcontextprotocol.ioand themodelcontextprotocolGitHub organization. - [PROMPT_INJECTION]: The
scripts/evaluation.pyscript identifies an indirect prompt injection surface by ingesting test questions from XML files and interpolating them into the LLM context. This is documented as an inherent risk of the evaluation framework that requires developer oversight. - [DATA_EXFILTRATION]: The skill provides tools for connecting to remote service endpoints via HTTP and SSE as part of the MCP standard, which is necessary for integrating external APIs.
Audit Metadata