Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence.
Install
npx skills add github/awesome-copilot --skill mcp-implementation-security-reviewnpx skills add github/awesome-copilot --skill mcp-implementation-security-review -a claude-code -gnpx skills add github/awesome-copilot --skill mcp-implementation-security-review -a codex -ggemini skills install https://github.com/github/awesome-copilot.git --path skills/mcp-implementation-security-reviewgh skill install github/awesome-copilot mcp-implementation-security-reviewgit clone --depth 1 https://github.com/github/awesome-copilot /tmp/github__awesome-copilot
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/github__awesome-copilot/skills/mcp-implementation-security-review ~/.claude/skills/mcp-implementation-security-review # Claude Code
cp -R /tmp/github__awesome-copilot/skills/mcp-implementation-security-review ~/.agents/skills/mcp-implementation-security-review # Codex, Cursor, Gemini CLI, Copilot, OpenCode