Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and…
安装
npx skills add github/awesome-copilot --skill mcp-security-auditnpx skills add github/awesome-copilot --skill mcp-security-audit -a claude-code -gnpx skills add github/awesome-copilot --skill mcp-security-audit -a codex -ggemini skills install https://github.com/github/awesome-copilot.git --path skills/mcp-security-auditgh skill install github/awesome-copilot mcp-security-auditgit clone --depth 1 https://github.com/github/awesome-copilot /tmp/github__awesome-copilot
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/github__awesome-copilot/skills/mcp-security-audit ~/.claude/skills/mcp-security-audit # Claude Code
cp -R /tmp/github__awesome-copilot/skills/mcp-security-audit ~/.agents/skills/mcp-security-audit # Codex, Cursor, Gemini CLI, Copilot, OpenCode