MCP Server Security Review
Performs comprehensive security audits of Model Context Protocol (MCP) servers to identify vulnerabilities, injection risks, and overpermissioning.
Performs comprehensive security audits of Model Context Protocol (MCP) servers to identify vulnerabilities, injection risks, and overpermissioning.
The MCP Server Security Review skill provides a structured, OWASP-grounded framework for evaluating the security posture of Model Context Protocol implementations. Whether auditing custom-built servers or evaluating third-party integrations, this skill guides users through a rigorous inspection of transport authentication, tool permission scopes, and input validation to prevent command injection and SSRF. By classifying tools based on their risk level and assessing data exposure risks, it ensures that Claude Code integrations remain secure, least-privileged, and resilient against common AI-specific vulnerabilities like prompt injection and excessive agency.