mcp-server-building

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No malicious injection patterns or behavioral overrides were detected. The skill instructions prioritize security boundaries and least-privilege principles.- [DATA_EXFILTRATION]: No exfiltration patterns were found. The skill explicitly warns against logging or transmitting secrets, and external links point to official documentation and RFC repositories.- [COMMAND_EXECUTION]: The included Python script scripts/validate_tool_manifest.py performs static analysis of JSON manifest files using only standard library modules and does not invoke external commands or network resources.- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill provides clear guidance on safe credential management, emphasizing the use of environment variables and secret stores instead of embedding secrets in source code or arguments.- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unverified external downloads were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:37 PM
Security Audit — agent-trust-hub — mcp-server-building