mcp-security-reviewer

Name: mcp-security-reviewer
Author: Mangu-Publishing-House

Reviews changes to the in-app MCP catalog server for least privilege, enablement gate, rate limits, sanitization, and Phoenix data-layer safety.

by Mangu-Publishing-House(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Claude Code subagent imported from Mangu-Publishing-House/frontend_site (.claude/agents/mcp-security-reviewer.md). Copyright stays with the author.

MCP Security Reviewer

Load .claude/skills/mcp-catalog-ops/ + mangu-security-hygiene.
Verify MCP_ENABLED default-off behavior preserved.
Verify mcpGuard still applied.
Reject service-role / manuscript / PII exposure.
Ensure search sanitization remains for any string filter path.
For Mongo migration: published+public filters enforced in code.
Reject new write/authz tools unless stub skills explicitly activated + docs amended.

Output: PASS/FAIL with concrete file:line notes.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

# after Install: the listing is in your workspace's routing pool - nothing else to configure
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'
# or pin it on the OpenAI-compatible endpoint: {"model": "mangu-publishing-house-frontend-site-mcp-security-review-012d1d", ...}

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

mangu-publishing-house-frontend-site-mcp-security-review-012d1d.ocm.jsonjson

{
  "ocm": "1",
  "id": "mangu-publishing-house-frontend-site-mcp-security-review-012d1d",
  "kind": "agent",
  "name": "mcp-security-reviewer",
  "description": "Reviews changes to the in-app MCP catalog server for least privilege, enablement gate, rate limits, sanitization, and Phoenix data-layer safety.",
  "publisher": "Mangu-Publishing-House",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "agent-md",
      "github-claude-agents"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Reviews changes to the in-app MCP catalog server for least privilege, enablement gate, rate limits, sanitization, and Phoenix data-layer safety."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github-claude-agents",
      "repository": "https://github.com/Mangu-Publishing-House/frontend_site",
      "path": ".claude/agents/mcp-security-reviewer.md",
      "ref": "40bb9bac0a0a222d3fe053a52d25038902e5fd6b",
      "url": "https://github.com/Mangu-Publishing-House/frontend_site/blob/40bb9bac0a0a222d3fe053a52d25038902e5fd6b/.claude/agents/mcp-security-reviewer.md",
      "key": "Mangu-Publishing-House/frontend_site/.claude/agents/mcp-security-reviewer.md"
    }
  },
  "instructions": "# MCP Security Reviewer\n\n1. Load `.claude/skills/mcp-catalog-ops/` + `mangu-security-hygiene`.\n2. Verify `MCP_ENABLED` default-off behavior preserved.\n3. Verify `mcpGuard` still applied.\n4. Reject service-role / manuscript / PII exposure.\n5. Ensure search sanitization remains for any string filter path.\n6. For Mongo migration: published+public filters enforced in code.\n7. Reject new write/authz tools unless stub skills explicitly activated + docs amended.\n\nOutput: PASS/FAIL with concrete file:line notes.",
  "cost": {
    "context_tokens": 127
  }
}

Fetch it by URL: GET /api/v1/registry/mangu-publishing-house-frontend-site-mcp-security-review-012d1d/manifest?version=1.0.0