Agent Skills Index

Directory / Awesome Copilot skills (GitHub) / mcp-security-audit

mcp-security-audit

skill Security

Audit MCP (Model Context Protocol) server configurations for security issues. Use this skill when: - Reviewing .mcp.json files for security risks - Checking MCP server args for hardcoded secrets or shell injection patterns - Validating that MCP package-runner dependencies use exact reviewed versions, not bare names, @latest, or ranges - Detecting mutable npm/npx, bunx, pnpm dlx, yarn dlx, and npm exec references in MCP configurations - Auditing which MCP servers a project registers and whether they're on an approved list - Checking for environment variable usage vs. hardcoded credentials in MCP configs - Any request like "is my MCP config secure?", "audit my MCP servers", or "check .mcp.json" keywords: [mcp, security, audit, secrets, shell-injection, supply-chain, governance]
Description from the SKILL.md front matter.

Install

GitHub CLI v2.90+ (Copilot by default)
gh skill install github/awesome-copilot mcp-security-audit
For Claude Code
gh skill install github/awesome-copilot mcp-security-audit --agent claude-code
For Codex
gh skill install github/awesome-copilot mcp-security-audit --agent codex

Commands follow each host's documentation (GitHub Copilot, plus Claude Code, Codex, Cursor via gh skill docs). gh skill needs GitHub CLI 2.90 or later and is in public preview.

Listed from GitHub + community contributors's catalog, not reviewed by us. Read the source before installing.

Catalog
Awesome Copilot skills (GitHub)
Author
Not stated in the source
Source code
github/awesome-copilot
License
MIT (repository license)
Repository stars
40,178 for github/awesome-copilot (the whole catalog repo)
Added to catalog
Not tracked for this source
Last change
2026-10-16 (last push to the repo)

What it contains

Similar in Security