writingmate-mcp

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents the integration with Writingmate's official MCP server. All URLs target the vendor's primary domains (writingmate.ai) and official GitHub repository (github.com/writingmate/skills), which are considered safe for the skill's purpose.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage API keys using environment variables or secure storage and includes explicit warnings against pasting keys into public files, prompts, or screenshots.
  • [COMMAND_EXECUTION]: The provided commands for adding the MCP server to Claude Code (claude mcp add) are standard integration steps for the platform and use the official vendor endpoint.
  • [DATA_EXFILTRATION]: Operating rules include a directive not to send secrets, private code, or personal data without explicit user confirmation, aligning with data protection best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 01:03 PM
Security Audit — agent-trust-hub — writingmate-mcp