Directory / Awesome Copilot skills (GitHub) / mcp-implementation-security-review

mcp-implementation-security-review

Review the implementation source code of MCP (Model Context Protocol) servers, clients, and tool handlers against a security baseline — authentication, sessions, rate limiting, input-schema validation, official-SDK usage, RCE vectors, and the OWASP MCP Top 10 — producing a report with file/line evidence. Use this skill when: - Reviewing an MCP server implementation for security before release - Checking a server against the baseline controls (MCP-01 to MCP-05) and the OWASP MCP Top 10 - Auditing tools for RCE vectors (command/code injection, unsafe deserialization, path traversal, SSTI, dependency hijacking, SSRF) - Verifying auth, session, rate-limiting, and input-validation controls on a network-exposed server - Reviewing MCP client code that handles untrusted server responses and session IDs - Requests like "review this MCP server for security" or "is my MCP server implementation secure?"
Description from the SKILL.md front matter.

Install

GitHub CLI v2.90+ (Copilot by default)

gh skill install github/awesome-copilot mcp-implementation-security-review

For Claude Code

gh skill install github/awesome-copilot mcp-implementation-security-review --agent claude-code

For Codex

gh skill install github/awesome-copilot mcp-implementation-security-review --agent codex

Commands follow each host's documentation (GitHub Copilot, plus Claude Code, Codex, Cursor via gh skill docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.

Listed from GitHub + community contributors's catalog, not reviewed by us. Read the source before installing.

Catalog: Awesome Copilot skills (GitHub)
Author: Not stated in the source
Source code: github/awesome-copilot
License: MIT (repository license)
Repository stars: 40,178 for github/awesome-copilot (the whole catalog repo)
Added to catalog: Not tracked for this source
Last change: 2026-10-16 (last push to the repo)

What it contains

Skills: 1

Similar in Security

agent-owasp-compliance (Awesome Copilot skill)
agent-skill-stack (Awesome Copilot skill)
ai-prompt-engineering-safety-review (Awesome Copilot skill)
audit-integrity (Awesome Copilot skill)
dependabot (Awesome Copilot skill)
flowstudio-power-automate-governance (Awesome Copilot skill)