express-mcp

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from an external repository located at https://github.com/Eng0AI/express-mcp.git.
[REMOTE_CODE_EXECUTION]: The setup process involves running npm install, npm run build, and npm run dev immediately after cloning the external repository. This sequence executes code and scripts from a remote source that are not verified within the skill configuration.

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 23, 2026, 06:06 PM