zach-lingxing-mcp

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes multiple shell scripts in the mcp-servers/lingxing-openapi/deploy/ directory intended for system configuration and gateway deployment, such as deploy_gateway_via_ssh.sh, install_tailscale_on_ubuntu.sh, and open_ssh_tunnel.sh. These scripts are part of the core functionality for setting up the required network environment for the ERP integration.
  • [COMMAND_EXECUTION]: In tests/test_mcp_server.py, the subprocess.Popen function is used to launch the local Python MCP server (server.py) during integration tests. The execution is limited to the skill's own internal scripts for testing purposes.
  • [PROMPT_INJECTION]: The README.md provides natural language templates for the user to provide to the AI agent to facilitate installation and troubleshooting. These are standard usage instructions and do not attempt to bypass safety filters or override agent behavior maliciously.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 03:37 PM
Security Audit — agent-trust-hub — zach-lingxing-mcp