Discover the toolingbehind modern intelligence
The operating system for AI infrastructure discovery. Search a live map of MCP servers, AI agents, LLM tools, automation systems, and developer infrastructure.
MCP-Security-Checklist
A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.
827stars
71forks
Quality signals
StaleNo testsNo CIThin docsNo licensePopular
AI summary
Auto-generated overview of what this skill does and when to reach for it.
A security checklist to harden MCP-based AI tools against injection, data leaks, and unauthorized access in plugin ecosystems.
Use this when
- Building an MCP server for sensitive data access
- Integrating cryptocurrency tools into an AI assistant
- Deploying MCP plugins in production environments
- Auditing third-party MCP servers before use
- Running multiple MCP servers with shared resources
Don't use when
- Need a quick security scan without deep configuration
- Looking for runtime monitoring tools
- Want to test MCP server performance
Capabilities
- Checks input validation for all API endpoints
- Validates server authentication and credential storage
- Enforces role-based access control for resources
- Requires container isolation and non-root execution
- Mandates lifecycle cleanup for background processes
- Includes rate limiting to prevent API abuse
InstallMCPInstall as a Claude Code skill
Universal installANY TOOL
$ npx skillcity@latest slowmist/MCP-Security-ChecklistAuto-detects the skill or MCP server in this repo and installs it for Claude Code, Codex, Cursor, Cline, OpenCode, Gemini CLI, Anti-Gravity, OpenClaw and Hermes.
Requires Node.js 18+ (ships with npx).
Or install manually
# Install into ~/.claude/skills/ mkdir -p ~/.claude/skills/mcp-security-checklist curl -fsSL https://raw.githubusercontent.com/slowmist/MCP-Security-Checklist/main/README.md -o ~/.claude/skills/mcp-security-checklist/SKILL.md
Loading README…
Ask a simulated agent to run this skill. It loads the real SKILL.md and reasons over your task with NVIDIA.
mcp-security-checklist — sandboxAI sandbox
Pick a quick prompt below or type your own — watch the agent execute this skill step by step.
guest@skillcity:~$Try a prompt