Files
awesome-copilot/skills
Swetha Kumar 72fae201df Add mcp-security-baseline skill (#2212)
* Add mcp-security-baseline skill

An Agent Skill that reviews MCP server and client source code against a security
baseline (5 controls, 7 RCE vectors, OWASP MCP Top 10) and produces a compliance
report with file/line evidence. Complements mcp-security-audit, which checks
.mcp.json configuration.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review feedback: remove ignored keywords field, link MCP spec

- Remove the top-level `keywords` field: it is not a recognized skill
  front-matter field and is ignored (skills are indexed for search by
  name + description only). The keyword terms are already present in the
  description, so discovery is unaffected.
- Link the MCP 2025-03-26 specification at the protocol-version check so
  the agent has it for quick reference.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review feedback: fix unsafe-deserialization example, link current MCP spec

- Change the unsafe-deserialization example from `yaml.load(..., Loader=yaml.FullLoader)`
  to `Loader=yaml.UnsafeLoader` to reflect genuinely unsafe usage.
- Add a link to the current MCP spec revision (2025-11-25) alongside the 2025-03-26
  baseline on the protocol-version check.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Swetha Kumar <16600902+Swethakumar1@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Aaron Powell <me@aaron-powell.com>
2026-07-09 00:49:40 +00:00
..
2026-03-05 21:53:41 +11:00
2026-04-28 11:29:28 +10:00
2026-06-18 11:28:03 +10:00
2026-04-20 12:31:29 +10:00
2026-02-16 22:43:41 +01:00
2026-06-16 11:18:02 +10:00
2026-06-15 10:55:29 +10:00
2026-01-06 21:35:41 +01:00
2026-03-16 10:27:54 +11:00
2026-06-16 11:50:25 +10:00
2026-05-15 11:06:16 +10:00
2026-03-13 13:45:17 +11:00