mcp-creator
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill features a robust security reference (
references/auth-and-security.md) that educates users and agents on preventing SSRF, validating input, and managing secrets via environment variables. - [EXTERNAL_DOWNLOADS]: Retrieves live framework documentation from
https://gofastmcp.com/llms-full.txtto align implementation with the most recent API specifications. - [COMMAND_EXECUTION]: Utilizes the
wagentsCLI for project initialization and theuvpackage manager for dependency management and local server validation. - [PROMPT_INJECTION]: Implements a workflow for fetching external documentation, which introduces an indirect prompt injection surface.
- Ingestion points:
SKILL.md(Consult Live Documentation section). - Boundary markers: Absent.
- Capability inventory: File system creation (
wagents new), command execution (uv run). - Sanitization: Absent.
Audit Metadata