build-mcp-server-sdk-v1
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a professional development toolkit for building MCP servers. It provides legitimate scaffolding and documentation aligned with official standards.
- [COMMAND_EXECUTION]: The skill includes shell scripts (
scaffold-v1-server.sh,check-mcp-sdk-v1-version.sh) for project initialization and dependency verification. These scripts use standard system commands and do not exhibit hidden or malicious behavior. - [EXTERNAL_DOWNLOADS]: The skill references official NPM packages and well-known development tools from trusted vendors, such as Anthropic's MCP Inspector. The installation mechanism uses a standard CLI tool from the author's own repository.
- [INDIRECT_PROMPT_INJECTION]: Although the skill generates code for processing external tool arguments, it proactively mitigates injection risks by demonstrating and requiring the use of Zod for schema validation and incorporating path traversal checks in filesystem examples.
Audit Metadata