All skills & plugins / Awesome Copilot skills (GitHub)

mcp-implementation-security-review

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Ch

Type: Skill
Catalog: Awesome Copilot skills (GitHub)
Source: github/awesome-copilot/skills/mcp-implementation-security-review (1 files scanned)
Install and details: Agent Skills Index entry
License: not stated in the folder or manifest (the repository license may apply)
Signals: none found

Pre-approved tools

No allowed-tools or tools list in its SKILL.md, command or agent files, so the agent asks before using tools as usual.

Hooks

No hooks.

MCP servers and apps

None.

Bundled code

No code files, only instructions and other assets.

Credentials referenced

No key, token or secret environment variable found in code or MCP config.

Static scan of commit d75b418 on 2026-10-27. Signals are patterns found in the files, not a verdict: a network call can be the whole point of a skill. Read the linked lines before you decide. How the scan works.