MCP Integration
This skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect external service", mentions "${CLAUDE_PLUGIN_ROOT} with MCP", or discusses MCP server types (SSE, stdio, HTTP, WebSocket). Provides comprehensive guidance for integrating Model Context Protocol servers into Claude Code plugins for external tool and service integration.
Security
2 findings — 2 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.90). The skill explicitly configures and connects to external MCP servers (SSE/HTTP/WS and stdio) such as Asana/GitHub/custom hosted URLs (see "MCP Server Types", examples/sse-server.json and examples/http-server.json in SKILL.md), and its agents/commands are expected to call and read those third-party tool responses and act on them (see "Using MCP Tools in Commands and Agents" and agent workflows), which means untrusted, user-generated content from arbitrary external services can influence tool use and agent actions.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.90). The skill includes runtime MCP server endpoints that the agent connects to (e.g., SSE/HTTP/WebSocket URLs such as https://mcp.asana.com/sse and https://api.example.com/mcp) and an example that runs remote code via npx (npx -y @modelcontextprotocol/server-filesystem) — these are fetched/connected at runtime and provide tool schemas/responses or execute code that directly control agent behavior.
- Repository
- anthropics/claude-code
- Commit
ee81682
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.