LLMSkillHub
mirroredCopied from oxbshw/LLM-Agents-Ecosystem-Handbook under MIT. oxbshw has not claimed this page, and is not affiliated with LLM SkillHub.

oxbshw / mcp-security-reviewer

Use before connecting a new MCP server to your agent — produces a structured security review covering source, permissions, tools, network, and approvals.

0
SKILL.md
1.6 KB

MCP Security Reviewer

When to use

  • A new MCP server is being added to an agent
  • An MCP server version is being bumped
  • An incident triggered a re-review

Inputs

NameTypeRequiredNotes
repo_urlstringyesthe MCP server's source
versionstringyestag or commit SHA being adopted
intended_usestringyesone paragraph: what we'll let it do

Workflow

  1. Source review: clone at the pinned version; check for unexpected files / scripts
  2. Capabilities: list every tool and resource exposed; map to risk levels (references/mcp-risk-matrix.md)
  3. Network: identify outbound endpoints; document and assess each
  4. Permissions: minimum required scopes / tokens; document over-permissions
  5. Output handling: confirm the agent treats tool output as untrusted (sanitization, no execution)
  6. Approvals: define which tools require human approval
  7. Produce filled MCP_SERVER.md in mcp/<server>.md

References

  • [`references/mcp-risk-matrix.md`](references/mcp-risk-matrix.md)

Success criteria

  • All tools labelled by risk
  • High/Critical tools gated by approval
  • Pinned version (no latest / floating refs)
  • Documented network egress

Failure modes

  • Source unavailable / un-pinnable → reject
  • Discovered hidden tool not in docs → reject and report upstream