fiddler-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands (bash, PowerShell) to verify application installation and identify parent processes. These operations are limited to local system reconnaissance for configuration purposes.
- [COMMAND_EXECUTION]: An inline Python script is used to parse local JSON configuration files (
appsettings.json) within the Fiddler application directory to discover the MCP server port. - [COMMAND_EXECUTION]: On Windows, the skill utilizes
Invoke-CimMethod(WMI) to launch the Fiddler Everywhere executable from standard installation paths if it is not already running. - [SAFE]: All network operations (via
curl) are directed atlocalhost(127.0.0.1) to interact with the vendor's local API. No external data exfiltration or remote code execution from third-party domains was detected. - [SAFE]: The skill is authored by 'telerik' and its operations are restricted to managing 'telerik' software (Fiddler Everywhere) using standard application paths and local communication channels.
Audit Metadata