メニュー
Review MCP server changes for security guardrails: least privilege, read-only DB defaults, SQL safety checks, secrets handling, and safe logging. Use before merging DB-related MCP changes.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
"Browse Bitbucket Cloud repositories and pull requests, read PR diffs, and create pull requests via the {{DISPLAY_NAME}}. Triggers on: list repos/branches/PRs, view a pull request or its diff, open/create a PR. PR creation is gated and supports dryRun."
Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety.
Control DB query budget with timeout, row limits, and concurrency caps to prevent abuse and resource exhaustion.
Validate MCP contract stability for tools/list, tools/call, schemas, and backward compatibility before merge or release.
Standardize MCP errors into user-actionable vs developer/internal classes with stable codes and safe messages.
Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.
| name | mcp-security-review |
| description | Review MCP server changes for security guardrails: least privilege, read-only DB defaults, SQL safety checks, secrets handling, and safe logging. Use before merging DB-related MCP changes. |
zod)?README.md updated for tool inputs/limits/examples.high|medium|low.