mcp-builder
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches protocol specifications and SDK documentation from official sources, specifically
modelcontextprotocol.ioand themodelcontextprotocolGitHub organization. These are the authoritative repositories for the technology described and are considered safe. - [COMMAND_EXECUTION]: The provided Python script
scripts/evaluation.pyacts as a test harness that executes local MCP servers via thestdiotransport. It spawns subprocesses using commands and arguments provided by the user via command-line arguments (e.g.,-c python -a my_server.py) to facilitate local testing and debugging. - [SAFE]: A thorough review of the skill's instructions, documentation, and scripts reveals no malicious patterns, obfuscation, data exfiltration, or persistence mechanisms. The capabilities provided are standard for developer-centric tools designed to build and verify AI-integrated services.
Audit Metadata