mcp-deploy
Fail
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads and executes the official installation script for the 'uv' tool from Astral (astral.sh), which is a well-known service in the software development community.\n- [EXTERNAL_DOWNLOADS]: Instructs the agent to fetch binary releases from the official Gitea project repository (gitea.com) for server deployment.\n- [COMMAND_EXECUTION]: Executes several shell operations including directory creation (
mkdir), file writing (cat), and moving files (cp) to set up the MCP environment.\n- [PRIVILEGE_ESCALATION]: Includes commands to modify file permissions (chmod +x) and move files to system binary directories (/usr/local/bin/). These are standard installation procedures for the skill's primary purpose.\n- [INDIRECT_PROMPT_INJECTION]: \n - Ingestion points: Processes user-supplied API keys, URLs, and tokens within the deployment workflow.\n
- Boundary markers: None; the skill directly incorporates user inputs into shell commands.\n
- Capability inventory: The skill utilizes shell command execution across all configuration steps.\n
- Sanitization: Does not perform explicit validation or escaping of user strings before they are used in command-line arguments.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata