1 skill for Mcp
Review an MCP server for spec compatibility, schema checks, and tool permissions. Use for an MCP security review. Do not use for a generic HTTP API, or to pass a user's token through to an untrusted tool.
# MCP Security Review Skill for Cursor
## Install
Install the native export at `.cursor/skills/mcp-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# MCP Security Review Skill for Cursor
Cursor skill `mcp-security-review` for MCP. Run it with `/mcp-security-review`, or let Agent select it when the request matches. `paths` only limits automatic surfacing.
## When to run
Run this review for an MCP server: a new tool, a transport, a spec bump, or "what can this tool do".
## When to leave it
Do not upgrade dependenc...