adding-mcp-oauth
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install official and well-known software packages from established registries (NPM and PyPI). These include the vendor's own SDKs (@scalekit-sdk/node, scalekit-sdk-python) and official MCP development tools (@modelcontextprotocol/sdk, fastmcp). All remote references target the author's official domains (scalekit.com) or well-known technology documentation sites.
- [COMMAND_EXECUTION]: Provides standard shell commands for local development tasks, such as installing dependencies and running diagnostic checks using
curl. These commands are used for manual verification of the implementation and do not involve piped remote script execution or other high-risk patterns. - [CREDENTIALS_UNSAFE]: Correctly demonstrates the use of environment variables (
process.envandos.getenv) for managing sensitive credentials like client secrets, avoiding hardcoded secrets in the code samples.
Audit Metadata