Menu
Review security for internal codebase-index MCP: data isolation, secret redaction, access control, safe logging, and controlled query exposure.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
"Browse Bitbucket Cloud repositories and pull requests, read PR diffs, and create pull requests via the {{DISPLAY_NAME}}. Triggers on: list repos/branches/PRs, view a pull request or its diff, open/create a PR. PR creation is gated and supports dryRun."
Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety.
Control DB query budget with timeout, row limits, and concurrency caps to prevent abuse and resource exhaustion.
Validate MCP contract stability for tools/list, tools/call, schemas, and backward compatibility before merge or release.
Standardize MCP errors into user-actionable vs developer/internal classes with stable codes and safe messages.
Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.
| name | index-security-review |
| description | Review security for internal codebase-index MCP: data isolation, secret redaction, access control, safe logging, and controlled query exposure. |
pass or fail with severity-tagged findings.