mcp-implementation-security-review — Agent Skill 安装配置（SkillsMP）

{
  "id": "io.github.github/awesome-copilot/mcp-implementation-security-review",
  "type": "skill",
  "version": "main",
  "displayName": "mcp-implementation-security-review",
  "description": "Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when:\n- Reviewing an MCP server implementation for security before release\n- Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10\n- Auditing tools for RCE vectors (command/code injection, unsafe deserialization, path traversal, SSTI, dependency hijacking, SSRF)\n- Verifying auth, session, rate-limiting, and input-validation controls on a network-exposed server\n- Reviewing MCP client code that handles untrusted server responses and session IDs\n- Requests like \"review this MCP server for security\" or \"is my MCP server implementation secure?\"",
  "author": {
    "name": "github",
    "url": "https://github.com/github"
  },
  "repository": {
    "url": "https://github.com/github/awesome-copilot",
    "source": "github",
    "subfolder": "skills/mcp-implementation-security-review"
  },
  "homepage": "https://skillsmp.com/creators/github/awesome-copilot/skills-mcp-implementation-security-review",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "github/awesome-copilot@mcp-implementation-security-review",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "repo_stars:36700"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "github-awesome-copilot-skills-mcp-implementation-security-review-skill-md",
    "originalUrl": "https://skillsmp.com/creators/github/awesome-copilot/skills-mcp-implementation-security-review",
    "isOfficial": false,
    "status": "active"
  }
}