agentskill.sh
secured
mcp-builder
Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
Security score
This tab presents tested categories, issue summaries, and source snippets in an audit-style report.
High / Medium / Low
Categories Tested
Instruction boundariesFilesystem writesNetwork referencesPlatform-specific install flow
Security Issues
Low
External Calls
Line 41
External URL reference
Start with the sitemap to find relevant pages: `https://modelcontextprotocol.io/sitemap.xml`
Low
External Calls
Line 43
External URL reference
Then fetch specific pages with `.md` suffix for markdown format (e.g., `https://modelcontextprotocol.io/specification/draft.md`).
Low
External Calls
Line 203
External URL reference
- **MCP Protocol**: Start with sitemap at `https://modelcontextprotocol.io/sitemap.xml`, then fetch specific pages with `.md` suffix
Mitigations
Review the upstream repository before copying files into a local skills directory.
Confirm install instructions and supported runtimes against SKILL.md instead of a generic readme.