Is mcp-builder safe?

anthropics/skills · scanned Oct 4, 2026

What it says it does

Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).

Score 100/100

No significant risks found by the automated scan.

No risky patterns found

Source

Repository: anthropics/skills/skills/mcp-builder
Commit: 8a1541c4a3ff
Scanned: Oct 4, 2026
Files checked: 10
Stars: 180k
License: None declared
Last push: Oct 3, 2026

What it can reach

External domains mentioned anywhere in the skill's files.

api.example.comexample.commodelcontextprotocol.ioraw.githubusercontent.comwww.apache.org

Findings (0)

Pattern matches are leads, not proof. A finding in documentation is often harmless; one in a script deserves a closer look.

The automated scan didn't flag anything. That's a good sign, but it is not a guarantee.

Files scanned (10)

skills/mcp-builder/LICENSE.txt (11.1 KB)
skills/mcp-builder/reference/evaluation.md (21.2 KB)
skills/mcp-builder/reference/mcp_best_practices.md (7.2 KB)
skills/mcp-builder/reference/node_mcp_server.md (27.9 KB)
skills/mcp-builder/reference/python_mcp_server.md (24.5 KB)
skills/mcp-builder/scripts/connections.py (4.8 KB)
skills/mcp-builder/scripts/evaluation.py (12.3 KB)
skills/mcp-builder/scripts/example_evaluation.xml (1.2 KB)
skills/mcp-builder/scripts/requirements.txt (29 B)
skills/mcp-builder/SKILL.md (8.9 KB)

Add the badge to your README

Shows the current grade and links back to this report. It updates when the skill is rescanned.

[![SkillsVetted grade](https://skillsvetted.com/badge/anthropics/mcp-builder.svg)](https://skillsvetted.com/skills/anthropics/mcp-builder)

Rescan

Pull the latest commit from GitHub and update this listing.

Want a human to check it?

A full review covers what pattern matching can't: intent, logic and behavior in a sandbox.

Request full review