---
title: "mcp-security"
description: "Security auditing for MCP servers (RCE, STDIO injection, supply chain) and for GitHub Actions workflows that run Gemini CLI (untrusted-input routing, tool allowlists, credential exposure)."
canonical: https://agentpluginsdirectory.com/plugins/mcp-security
last-updated: 2026-11-07
---

# mcp-security
Security auditing for MCP servers (RCE, STDIO injection, supply chain) and for GitHub Actions workflows that run Gemini CLI (untrusted-input routing, tool allowlists, credential exposure).
- Slug: mcp-security
- Publisher: ghchinoy
- Repository: https://github.com/ghchinoy/agent-skills
- Manifest: plugins/mcp-security/plugin.json
- Version: 1.2.0
- License: Apache-2.0
- Category (editorial): security
- Skills: 2 (geminicli-github-action-review, mcp-auditor)
- MCP servers: 0
- Stars: 1
- Repository created: 2026-04-17
- Repository last pushed: 2026-11-06
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/mcp-security
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## Skills

- geminicli-github-action-review
- mcp-auditor: Audits local Model Context Protocol (MCP) server configurations and custom-built MCP servers for Remote Command Execution (RCE) and supply chain vulnerabilities, specifically focusing on STDIO transport injection and malicious prompt injection. Use when auditing MCP server configs, reviewing MCP se…

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.