Audit Model Context Protocol server configurations and apply least-privilege scoping. Covers MCP inventory, capability risk-tiering, secret detection in configuration, malicious or compromised package indicators, and the lifecycle from install through rotation to revocation. Invoke before granting an MCP write access to production, after an MCP security advisory, or as periodic audit.
How to install mcp-security?
goldenwing-360/claude-security-skills/mcp-security
$npx -y skills add goldenwing-360/claude-security-skills --skill mcp-securityInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/goldenwing-360/claude-security-skills" --skill "goldenwing-360/claude-security-skills/mcp-security"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/goldenwing-360/claude-security-skills" that are relevant to the current task. Run `npx skills add "https://github.com/goldenwing-360/claude-security-skills"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- find-skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express…Jul 2026
- mcp-builderGuide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools.Jul 2026
- google-agents-cli-adk-codeThis skill should be used when the user wants to "write agent code", "build an agent with ADK", "add a tool", "create a callback", "define an agent", "use…Jul 2026
- google-agents-cli-workflowThis skill should be used when the user wants to "develop an agent", "build an agent using ADK", "run the agent locally", "debug agent code", "test an agent",…Jul 2026
- google-agents-cli-evalThis skill should be used when the user wants to "run an evaluation", "evaluate my ADK agent", "write an eval dataset", "analyze eval failures", "compare eval…Jul 2026
- google-agents-cli-scaffoldThis skill should be used when the user wants to "create an agent project", "start a new ADK project", "build me a new agent", "add CI/CD to my project", "add…Jul 2026
