mcp-builder
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing a structured framework for building secure and effective AI tools using the Model Context Protocol (MCP).
- [EXTERNAL_DOWNLOADS]: The skill refers to official documentation from trusted sources including the Model Context Protocol website and official GitHub repositories for the TypeScript and Python SDKs. These are standard developer resources.
- [COMMAND_EXECUTION]: The instructions include standard development and testing commands like
npm run build,python -m py_compile, and the use of the official MCP inspector (npx @modelcontextprotocol/inspector). These are legitimate tools for code validation and debugging. - [CREDENTIALS_UNSAFE]: The content correctly advises developers to rely on platform-level authentication (Tines 3B routes) rather than implementing custom, potentially insecure OAuth handshakes within the server code, which is a security best practice.
Audit Metadata