mcp-security-hub
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to clone the source code from a public GitHub repository at
https://github.com/FuzzingLabs/mcp-security-hubto build the required Docker images. - [COMMAND_EXECUTION]: The skill configuration enables the AI assistant to execute
docker runcommands locally to interact with security tools like Nmap, Nuclei, and SQLMap. - [PRIVILEGE_ESCALATION]: The recommended configuration for network tools such as
nmapandmasscanincludes the--cap-add=NET_RAWflag, which grants the container the privilege to perform raw socket operations necessary for specialized network scanning. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a vulnerability surface where the AI assistant processes data from untrusted external sources, such as web server responses, binary file contents, and source code commits.
- Ingestion points: Network scan results, web technology fingerprints, vulnerability scan reports, disassembled binary strings, and git repository contents.
- Boundary markers: No specific delimiters or instructions to ignore embedded content are provided in the skill logic.
- Capability inventory: Network reconnaissance, web fuzzing, SQL injection testing, binary analysis, and credential discovery.
- Sanitization: The example server implementation does not specify sanitization or escaping of the output before it is returned to the AI context.
Audit Metadata