build-mcp-server-sdk-v2

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary content consists of high-quality educational material, implementation recipes, and configuration guides for the MCP v2 alpha SDK.
  • [COMMAND_EXECUTION]: Includes a shell script scripts/check-mcp-server-v2-version.sh for validating package.json dependencies. The script performs local analysis to ensure unstable alpha versions are pinned exactly, following best practices for software supply chain security.
  • [EXTERNAL_DOWNLOADS]: Recommends installing official packages from the @modelcontextprotocol scope and established libraries like Express, Hono, and Zod. These are standard and trusted dependencies for Node.js server development.
  • [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration were detected. The guides include specific instructions on secure credential management and scope-based authorization.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 10:26 PM
Security Audit — agent-trust-hub — build-mcp-server-sdk-v2