📦
Audit History
mcp-builder - 2 audits
Version comparison
Capability and finding changes across audited versions, newest first.
Audit version 2 Latest
Jul 7, 2026, 02:48 AM
Most static findings are false positives from Markdown code fences, TypeScript template literals, environment variable examples, and localhost URLs. One real issue remains: the deprecated skill asks users to run an npx installer for a replacement skill. No prompt injection text or credential exfiltration intent was found.
12
Files scanned
1,805
Lines analyzed
5
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Deprecated Skill Redirects Users to External Installer
The skill description tells users to run an npx installer for mcp-app-builder. This can trigger package-manager execution from a community entry.
The deprecation block directly names an npx install command and tells users to use another skill. Execution still requires user or agent action.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
`npx skills install mcp-use/mcp-use --skill mcp-app-builder`
The skill description instructs users to run an npx installer for a replacement skill. That creates package-manager supply-chain risk in a community skill.
Risk Factors
🔑 Env variables (18)
evals/implementation.json:16 evals/implementation.json:16 evals/implementation.json:16 references/tools-and-resources.md:18 references/tools-and-resources.md:292 references/tools-and-resources.md:334 references/tools-and-resources.md:18 references/tools-and-resources.md:292 references/tools-and-resources.md:334 references/tools-and-resources.md:292 references/tools-and-resources.md:297 references/tools-and-resources.md:299 references/tools-and-resources.md:303 references/tools-and-resources.md:314 references/widgets.md:90 references/widgets.md:385 references/widgets.md:90 references/widgets.md:385
⚙️ External commands (37)
references/resource-templates.md:111-138 references/resource-templates.md:144-146 references/response-helpers.md:49-50 references/response-helpers.md:84 references/response-helpers.md:86 references/response-helpers.md:87-88 references/response-helpers.md:100-101 references/response-helpers.md:112-120 references/response-helpers.md:120-123 references/response-helpers.md:238-240 references/response-helpers.md:240-244 references/response-helpers.md:283-297 references/response-helpers.md:297-299 references/tools-and-resources.md:43-46 references/tools-and-resources.md:72-76 references/tools-and-resources.md:96-99 references/tools-and-resources.md:113-118 references/tools-and-resources.md:118-125 references/tools-and-resources.md:227-229 references/tools-and-resources.md:229-233 references/tools-and-resources.md:274-279 references/tools-and-resources.md:279-284 references/tools-and-resources.md:303-308 references/widgets.md:115-121 references/widgets.md:184-187 references/widgets.md:434-440 SKILL.md:4 SKILL.md:5 SKILL.md:6 SKILL.md:7 SKILL.md:26 SKILL.md:27 SKILL.md:33-71 SKILL.md:71-75 SKILL.md:75-77 SKILL.md:77 SKILL.md:79
Audited by: codex
Jul 7, 2026, 02:48 AM
Most static findings are false positives from Markdown code fences, TypeScript template literals, environment variable examples, and localhost URLs. One real issue remains: the deprecated skill asks users to run an npx installer for a replacement skill. No prompt injection text or credential exfiltration intent was found.
12
Files scanned
1,805
Lines analyzed
5
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Deprecated Skill Redirects Users to External Installer
The skill description tells users to run an npx installer for mcp-app-builder. This can trigger package-manager execution from a community entry.
The deprecation block directly names an npx install command and tells users to use another skill. Execution still requires user or agent action.
Capability review items (1)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
`npx skills install mcp-use/mcp-use --skill mcp-app-builder`
The skill description instructs users to run an npx installer for a replacement skill. That creates package-manager supply-chain risk in a community skill.
Risk Factors
🔑 Env variables (18)
evals/implementation.json:16 evals/implementation.json:16 evals/implementation.json:16 references/tools-and-resources.md:18 references/tools-and-resources.md:292 references/tools-and-resources.md:334 references/tools-and-resources.md:18 references/tools-and-resources.md:292 references/tools-and-resources.md:334 references/tools-and-resources.md:292 references/tools-and-resources.md:297 references/tools-and-resources.md:299 references/tools-and-resources.md:303 references/tools-and-resources.md:314 references/widgets.md:90 references/widgets.md:385 references/widgets.md:90 references/widgets.md:385
⚙️ External commands (37)
references/resource-templates.md:111-138 references/resource-templates.md:144-146 references/response-helpers.md:49-50 references/response-helpers.md:84 references/response-helpers.md:86 references/response-helpers.md:87-88 references/response-helpers.md:100-101 references/response-helpers.md:112-120 references/response-helpers.md:120-123 references/response-helpers.md:238-240 references/response-helpers.md:240-244 references/response-helpers.md:283-297 references/response-helpers.md:297-299 references/tools-and-resources.md:43-46 references/tools-and-resources.md:72-76 references/tools-and-resources.md:96-99 references/tools-and-resources.md:113-118 references/tools-and-resources.md:118-125 references/tools-and-resources.md:227-229 references/tools-and-resources.md:229-233 references/tools-and-resources.md:274-279 references/tools-and-resources.md:279-284 references/tools-and-resources.md:303-308 references/widgets.md:115-121 references/widgets.md:184-187 references/widgets.md:434-440 SKILL.md:4 SKILL.md:5 SKILL.md:6 SKILL.md:7 SKILL.md:26 SKILL.md:27 SKILL.md:33-71 SKILL.md:71-75 SKILL.md:75-77 SKILL.md:77 SKILL.md:79
Audited by: codex