mcp-builder
Enables the creation and registration of custom MCP servers for enhanced tool integration and capabilities.
Install this skill
or
68/100
Security score
The mcp-builder skill was audited on Mar 3, 2026 and we found 6 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 154
Direct command execution function call
SourceSKILL.md
| 154 | const output = execSync(command, { timeout: 30000 }).toString(); |
medium line 54
Template literal with variable interpolation in command context
SourceSKILL.md
| 54 | content: [{ type: "text", text: `Result: ${param}` }], |
medium line 117
Template literal with variable interpolation in command context
SourceSKILL.md
| 117 | const res = await fetch(`https://wttr.in/${city}?format=3`); |
medium line 157
Template literal with variable interpolation in command context
SourceSKILL.md
| 157 | return { content: [{ type: "text", text: `Error: ${err.message}` }] }; |
low line 146
Node child_process module reference
SourceSKILL.md
| 146 | import { execSync } from "child_process"; |
low line 117
External URL reference
SourceSKILL.md
| 117 | const res = await fetch(`https://wttr.in/${city}?format=3`); |
Scanned on Mar 3, 2026
View Security DashboardInstall this skill with one command
/learn @sskarz/mcp-builder