mcp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill and its associated reference files do not contain any malicious patterns, prompt injections, or hidden code. The content is strictly educational and functional for software development.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and SDK information from trusted official sources, including the modelcontextprotocol.io domain and official GitHub repositories. These operations are transparent and safe.
- [INDIRECT_PROMPT_INJECTION]: The skill includes proactive security guidance for developers, advising on input validation using Zod and Pydantic to protect the servers they build from injection and directory traversal attacks.
- [DATA_EXPOSURE]: The implementation guides promote secure secret management by instructing users to use environment variables for API keys rather than hardcoding credentials.
Audit Metadata