protect-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup instructions include commands to install a plugin from the author's repository and run verification utilities from the NPM registry. These are standard procedures for deploying the governance tool described.
- [COMMAND_EXECUTION]: The skill configures shell hooks to execute scripts bundled with the plugin during tool invocation. These hooks are used for the legitimate purpose of evaluating Cedar policies and signing cryptographic receipts.
- [INDIRECT_PROMPT_INJECTION]: The skill implements hooks that ingest tool inputs and results. This architecture is used to enforce security policies and provide auditability, rather than for exploitation.
Audit Metadata