ghchinoy/mcp-security

v1.0.0Apache-2.0

Model Context Protocol (MCP) security auditing for RCE, STDIO injection, and supply chain vulnerabilities.

mcp-auditor

Audits local Model Context Protocol (MCP) server configurations and custom-built MCP servers for Remote Command Execution (RCE) and supply chain vulnerabilities, specifically focusing on STDIO transport injection and malicious prompt injection. Use when auditing MCP server configs, reviewing MCP server source code, or conducting a security review of AI IDE extensions.

Version: 1.0.0
License: Apache-2.0

Read SKILL.md at the source

Pinned to revision fb5d5d098b16, so it is the text this page describes rather than whatever the author pushed since.

Files

skills/mcp-auditor/SKILL.md
skills/mcp-auditor/references/sample-mcp-audit-report.md

Every link opens the file at its source, pinned to the revision this page describes.