mcp-tool-developer

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely instructional, providing templates and patterns for full-stack MCP development using TypeScript and Python.
  • [CREDENTIALS_UNSAFE]: No hardcoded credentials detected. The documentation explicitly advises developers to use environment variables for secrets and never to hardcode credentials.
  • [EXTERNAL_DOWNLOADS]: References official and well-known libraries such as @modelcontextprotocol/sdk for Node.js and the mcp package for Python. These are standard dependencies for the Model Context Protocol.
  • [PROMPT_INJECTION]: No malicious override or bypass patterns were found in the instructional text or examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 10:58 AM
Security Audit — agent-trust-hub — mcp-tool-developer