mcp-developer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a purely instructional reference guide for the Model Context Protocol (MCP). It contains no executable code or scripts of its own that run during the analysis.
- [SAFE]: Code examples provided for both TypeScript and Python correctly emphasize security best practices, including input validation using Zod and Pydantic, proper error handling using JSON-RPC 2.0 error codes, and path sanitization for file system resources.
- [SAFE]: All external references and command-line examples (e.g.,
npx @modelcontextprotocol/create-server,pip install mcp) point to official, well-known, and trusted packages within the Model Context Protocol ecosystem. - [SAFE]: The documentation explicitly includes 'Constraints' that instruct developers to avoid security pitfalls such as hardcoding credentials, skipping input validation, or exposing sensitive data in resources.
Audit Metadata