메뉴
Review MCP server changes for security guardrails: least privilege, read-only DB defaults, SQL safety checks, secrets handling, and safe logging. Use before merging DB-related MCP changes.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
"Browse Bitbucket Cloud repositories and pull requests, read PR diffs, and create pull requests via the {{DISPLAY_NAME}}. Triggers on: list repos/branches/PRs, view a pull request or its diff, open/create a PR. PR creation is gated and supports dryRun."
Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety.
Control DB query budget with timeout, row limits, and concurrency caps to prevent abuse and resource exhaustion.
Validate MCP contract stability for tools/list, tools/call, schemas, and backward compatibility before merge or release.
Standardize MCP errors into user-actionable vs developer/internal classes with stable codes and safe messages.
Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.
| name | mcp-security-review |
| description | Review MCP server changes for security guardrails: least privilege, read-only DB defaults, SQL safety checks, secrets handling, and safe logging. Use before merging DB-related MCP changes. |
zod)?README.md updated for tool inputs/limits/examples.high|medium|low.