1 skill for Mcp
Review an MCP server for spec compatibility, schema checks, and tool permissions. Use for an MCP security review. Do not use for a generic HTTP API, or to pass a user's token through to an untrusted tool.
# MCP Security Review Skill for Codex
## Install
Install the native export at `.agents/skills/mcp-security-review/SKILL.md` (one file shared with Antigravity CLI).
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# MCP Security Review
Shared skill `mcp-security-review` for MCP. Codex and Antigravity CLI both read `.agents/skills/mcp-security-review/SKILL.md`. Install this one file. Codex calls it with `$mcp-security-review` or `/skills`. Cursor, GitHub Copilot, and Devin also read `.agents/skills`. A second copy with the same name collides. D...