mcp-apps-sdk
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation for the
@modelcontextprotocol/ext-appslibrary. It provides instructions on how to set up an MCP server and a corresponding view using React or vanilla TypeScript. - [COMMAND_EXECUTION]: Provides standard developer commands for package management (npm) and project execution (tsx, vite). These are routine for setting up a Node.js development environment.
- [EXTERNAL_DOWNLOADS]: References official and well-known packages from the NPM registry, such as Express, Vite, and the Model Context Protocol SDK. It also mentions
cloudflaredfor local tunneling, which is a recognized service for web development. - [DATA_EXPOSURE]: Includes code that reads a local file (
mcp-app.html) from the project's own build directory (dist) to serve it as a resource. This is standard behavior for serving web assets and does not target sensitive system files.
Audit Metadata