Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

mcp-host-integration-security

Étoiles2

Forks0

Mis à jour8 juillet 2026 à 04:02

Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

tvnkhoa

tvnkhoa/mcp-local

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques·SOC 15-1212

SKILL.md

readonly

name	mcp-host-integration-security
description	Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.

MCP Host Integration Security

When to Use

Integrate MCP with IDE hosts or remote clients.
Add OAuth/PAT based authentication.
Review workspace-level trust boundaries.

Checklist

Token hygiene
- Keep tokens in secure env/store.
- Rotate tokens and avoid long-lived broad scopes.
Scope minimization
- Start with least privilege and expand only as needed.
Transport hardening
- Use localhost or HTTPS for remote traffic.
- Avoid exposing internal-only MCP endpoints publicly.
Access policy
- Restrict allowed roots/toolsets where possible.
Auditability
- Record who triggered high-risk operations.

Output Format

Pass/fail
Security findings with severity and mitigation

Plus depuis ce dépôt

même dépôt

key

tvnkhoa/mcp-local

"Browse Bitbucket Cloud repositories and pull requests, read PR diffs, and create pull requests via the {{DISPLAY_NAME}}. Triggers on: list repos/branches/PRs, view a pull request or its diff, open/create a PR. PR creation is gated and supports dryRun."

2026-07-082

db-parameterization-audit

tvnkhoa/mcp-local

Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety.

2026-07-082

db-query-budgeting

tvnkhoa/mcp-local

Control DB query budget with timeout, row limits, and concurrency caps to prevent abuse and resource exhaustion.

2026-07-082

mcp-contract-conformance

tvnkhoa/mcp-local

Validate MCP contract stability for tools/list, tools/call, schemas, and backward compatibility before merge or release.

2026-07-082

mcp-error-taxonomy

tvnkhoa/mcp-local

Standardize MCP errors into user-actionable vs developer/internal classes with stable codes and safe messages.

2026-07-082

mcp-observability-runbook

tvnkhoa/mcp-local

Define operational telemetry and incident runbooks for MCP servers: logs, metrics, alerts, and recovery paths.

2026-07-082

name	mcp-host-integration-security
description	Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.

MCP Host Integration Security

When to Use

Integrate MCP with IDE hosts or remote clients.
Add OAuth/PAT based authentication.
Review workspace-level trust boundaries.

Checklist

Token hygiene
- Keep tokens in secure env/store.
- Rotate tokens and avoid long-lived broad scopes.
Scope minimization
- Start with least privilege and expand only as needed.
Transport hardening
- Use localhost or HTTPS for remote traffic.
- Avoid exposing internal-only MCP endpoints publicly.
Access policy
- Restrict allowed roots/toolsets where possible.
Auditability
- Record who triggered high-risk operations.

Output Format

Pass/fail
Security findings with severity and mitigation