mcpc-mcp-client

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @apify/mcpc package globally using npm or bun. Apify is a well-known automation platform, and this installation method is standard for CLI tools.- [CREDENTIALS_UNSAFE]: The skill manages OAuth tokens and stores them in the OS keychain or a local file at ~/.mcpc/credentials with restricted permissions (0600). This is documented as a core feature for persistent sessions and follows standard security practices for local credential storage.- [COMMAND_EXECUTION]: The skill documents the use of sudo apt-get to install system dependencies (libsecret-1-0, gnome-keyring) required for secure credential storage on Linux systems. This is a routine administrative task for tool setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:43 PM
Security Audit — agent-trust-hub — mcpc-mcp-client