agent-mcp-host
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_MANAGEMENT]: The skill describes a tool that manages 'pairing codes' (passwords) and OAuth 2.1 tokens. It correctly identifies these as secrets and specifies they are stored in the platform's keychain service (app.paulie.agent-mcp-host.mcp). The instructions include explicit guardrails for the agent, directing it never to quote pairing codes into summaries, logs, or shared documents.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute the agent-mcp-host CLI. This is the intended purpose of the skill, serving as an interface for managing MCP server deployments.
- [EXTERNAL_DOWNLOADS]: The documentation mentions installing associated tools via Homebrew (e.g., brew install shhac/tap/agent-slack). These are vendor-owned resources provided by the author (shhac) and represent standard installation procedures for this tool family.
- [INDIRECT_PROMPT_INJECTION]: As an orchestrator that proxies multiple MCP servers and processes enrollment forms, the tool has an inherent ingestion surface. However, it implements security boundaries by using Ed25519 tokens to validate the host and namespacing credentials per tool to prevent cross-tool access.
Audit Metadata