setup-windows-mcp

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the installation script for the uv toolchain from its official domain (astral.sh).
  • [EXTERNAL_DOWNLOADS]: Downloads the windows-mcp package and its dependencies from PyPI, with support for the well-known Tsinghua University mirror for faster access in certain regions.
  • [COMMAND_EXECUTION]: Modifies user-level environment variables and agent configuration files (e.g., ~/.claude.json, ~/.codex/config.toml) to register the MCP server.
  • [DYNAMIC_EXECUTION]: Utilizes a Node.js one-liner within the setup script to perform safe JSON manipulation when updating agent configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 02:44 PM