Versioned security assessment

Report ID: SA-1C771D39

2/24/2026, 9:22:59 AM

mcp-builder security assessment v1

Skill Security Certification Report

Audit History
Audit model: claude Historical report
Skill name
mcp-builder
Version
v1
Maintainer
ZhanlinCui
Source
github.com/ZhanlinCui/Ultimate-Agent-Skills-Collection/tree/main/mcp-builder
Coverage
9 Files scanned · 3,330 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

This is a documentation skill containing guides for building MCP servers. Static analysis detected 498 patterns, but nearly all are FALSE POSITIVES from markdown documentation files showing code examples. The Python scripts (evaluation.py, connections.py) are legitimate evaluation tooling using official Anthropic and MCP SDKs. Minor risk from environment variable handling in evaluation scripts.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

9 Files scanned · 3,330 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 3 evidence locations

External commands

May invoke commands or programs outside the Skill.

Observed in 3 evidence locations

Capability review items (2)
Medium
scripts/evaluation.py:329-344
Environment Variable Handling in Evaluation Scripts
The evaluation.py script accepts environment variables via command-line arguments which could potentially expose secrets if logged. Variables are parsed but not validated for sensitive patterns.
Environment variables passed via CLI can appear in process listings and logs. The script parses them without filtering sensitive patterns like API keys or tokens.
Low
reference/node_mcp_server.md:413reference/python_mcp_server.md:193
HTTP Client Library Usage in Examples
Documentation contains examples using HTTP client libraries for API calls. These are instructional code examples, not executable code in the skill itself.
HTTP client usage is in markdown documentation showing example MCP server implementations, not in the skill's executable code.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: claude

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
SKILL.md:41-65reference/python_mcp_server.md:43
Hardcoded URLs in Documentation
Documentation files contain hardcoded URLs for MCP SDK repositories and documentation sites. These are informational references, not security risks.
URLs point to official MCP SDK GitHub repositories and documentation sites - these are legitimate documentation references.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable