soldy-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the
@soldy_ai/mcppackage from the NPM registry usingnpx. This is the standard delivery method for the Soldy AI Model Context Protocol (MCP) server. - [COMMAND_EXECUTION]: The skill provides commands for integrating the MCP server into various environments, such as
claude mcp addandcodex mcp add. It also suggests installing a secondary skill usingnpx skills add solgers/soldy-mcp@soldy. These commands are standard for the intended setup process. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill mentions the storage of credentials at
~/.soldy/credentials.jsonand the use of theSOLDY_API_KEYenvironment variable. These instructions are part of standard secret management for the service and do not involve unauthorized exfiltration or exposure.
Audit Metadata