setup-windows-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the installation script for the
uvtoolchain from its official domain (astral.sh). - [EXTERNAL_DOWNLOADS]: Downloads the
windows-mcppackage and its dependencies from PyPI, with support for the well-known Tsinghua University mirror for faster access in certain regions. - [COMMAND_EXECUTION]: Modifies user-level environment variables and agent configuration files (e.g.,
~/.claude.json,~/.codex/config.toml) to register the MCP server. - [DYNAMIC_EXECUTION]: Utilizes a Node.js one-liner within the setup script to perform safe JSON manipulation when updating agent configuration files.
Audit Metadata