mcp-vulnerabilities
OWASP MCP Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in Model Context Protocol environments.
Informations de source
- Dépôt
- willvelida/biotrackr
- Dernière activité de la source
- 11 avril 2026 à 08:12
- Langue détectée de SKILL.md
- anglais
- Étoiles
- 6
- Forks
- 3
Options d'installation
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Vérifiez les fichiers source
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Explorateur de fichiers
15 fichiersAffichage de SKILL.md
SKILL.md
Instructions source · Aperçu en lecture seule- name
- mcp-vulnerabilities
- description
- OWASP MCP Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in Model Context Protocol environments.
- license
- MIT
- metadata
- {"authors":"OWASP MCP Top 10 Project","spec_version":"1.0","framework_revision":"1.0.0","last_updated":"2026-02-13","skill_based_on":"https://github.com/chris-buckley/agnostic-prompt-standard","content_based_on":"https://owasp.org/www-project-mcp-top-10/"}
# MCP Vulnerabilities — Skill Entry
This `SKILL.md` is the **entrypoint** for the MCP Vulnerabilities skill.
The skill encodes the **OWASP MCP Top 10 (2025)** as structured, machine-readable references
that an agent can query to identify, assess, and remediate MCP security risks.
## Normative references (MCP Top 10)
1. [00 Vulnerability Index](references/00-vulnerability-index.md)
2. [01 Token Mismanagement and Secret Exposure](references/01-token-mismanagement-secret-exposure.md)
3. [02 Privilege Escalation via Scope Creep](references/02-privilege-escalation-scope-creep.md)
4. [03 Tool Poisoning](references/03-tool-poisoning.md)
5. [04 Software Supply Chain Attacks and Dependency Tampering](references/04-supply-chain-attacks-dependency-tampering.md)
6. [05 Command Injection and Execution](references/05-command-injection-execution.md)
7. [06 Prompt Injection via Contextual Payloads](references/06-prompt-injection-contextual-payloads.md)
8. [07 Insufficient Authentication and Authorization](references/07-insufficient-authentication-authorization.md)
9. [08 Lack of Audit and Telemetry](references/08-lack-of-audit-telemetry.md)
10. [09 Shadow MCP Servers](references/09-shadow-mcp-servers.md)
11. [10 Context Injection and Over-Sharing](references/10-context-injection-over-sharing.md)
## Skill layout
- `SKILL.md` — this file (skill entrypoint).
- `references/` — the MCP Top 10 normative documents.
- `00-vulnerability-index.md` — master index of all vulnerability identifiers, severities, and cross-references.
- `01` through `10` — one document per vulnerability aligned with OWASP MCP numbering.
- `assets/` — reusable format and constants blocks.
- `constants/` — vulnerability catalog and severity definitions.
- `constants-mcp-catalog-v1.0.0.md`
- `formats/` — output contract examples.
- `format-vulnerability-assessment-v1.0.0.md`
- `format-remediation-checklist-v1.0.0.md`
Voir sur GitHub