test-by-mcpc-cli
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical resource for the
mcpcutility. All external references, such as theyigitkonur.comdomain and@modelcontextprotocolofficial packages, are verified vendor resources or well-known service providers. - [COMMAND_EXECUTION]: The skill documents various
mcpcCLI commands for connecting to servers, listing tools, and executing MCP operations. These commands are necessary for the skill's primary purpose of testing and debugging MCP server implementations. - [PROMPT_INJECTION]: Static analysis identified a 'concealment' pattern due to the use of shell output redirection (
>/dev/null) in the CI/CD integration examples. This is a false positive, as the redirection is a standard practice for reducing log noise in automated environments and does not represent an attempt to hide malicious actions from the user or bypass safety constraints. - [DATA_EXFILTRATION]: The skill provides guidance on managing authentication (OAuth profiles, bearer headers) and configuring proxies. These features are standard components of the documented tool, and the skill does not contain hardcoded credentials or instructions to exfiltrate sensitive data to unauthorized external endpoints.
Audit Metadata