webmcp
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides developer guidance for integrating the WebMCP (Web Model Context Protocol) into browser-based applications. All technical instructions follow standard web development patterns and refer to legitimate upcoming browser APIs.
- [SAFE]: The
scripts/find-webmcp-targets.mjsscript performs local filesystem scanning to identify relevant frontend files for integration. It uses standard Node.jsfsandpathmodules with an appropriate ignore list (node_modules,.git, etc.) and does not perform any network operations. - [SAFE]: External URLs referenced in
references/compatibility.mdandreferences/webmcp-reference.mdtarget official and well-known repositories, specificallyGoogleChromeLabs/webmcp-toolsand the W3C/WebML Community Group'swebmachinelearning/webmcp. These are trusted sources for web standards and experimental browser features. - [SAFE]: The provided code templates (e.g.,
assets/model-context-registry.template.ts) use standard defensive programming techniques such as feature detection for experimental APIs (document.modelContext || navigator.modelContext) and proper cleanup usingAbortControllerto manage tool lifecycles.
Audit Metadata