Skills MCP Integration

📦

MCP Integration

Name: MCP Integration
Author: davila7

v0.1.0 Content revision r1 High Risk 🌐 Network access🔑 Env variables⚙️ External commands

Build MCP Integrations for Claude Code

MCP setup across transports, auth, and tool naming is easy to misconfigure. This skill guides Claude Code plugin authors through MCP server configuration and usage.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "MCP Integration" from https://skillstore.io/skills/davila7-mcp-integration.md and its manifest at https://skillstore.io/api/skills/davila7-mcp-integration/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/davila7-mcp-integration.md Signed manifest GET /api/skills/davila7-mcp-integration/manifest Signed lockfile GET /api/skills/davila7-mcp-integration/lockfile

Test it

Using "MCP Integration". I need to connect a plugin to an HTTP API with a bearer token.

Expected outcome:

Recommended HTTP transport for stateless API calls.
Use an environment variable for the bearer token.
Document token scopes, setup steps, and common auth failures.

Using "MCP Integration". My command needs to create and search tasks through an MCP server.

Expected outcome:

List only the specific MCP tools needed by the command.
Validate required user inputs before each tool call.
Return clear success, partial success, and failure messages.

Using "MCP Integration". I want to support both local development and production endpoints.

Expected outcome:

Use environment variables for endpoint selection.
Prefer secure production URLs and scoped tokens.
Add troubleshooting steps for missing variables and failed connections.

Security Audit

High Risk

v9 • 7/19/2026 Open versioned report

Most static alerts are false positives caused by Markdown fences, placeholders, example URLs, and documented authentication patterns. The audit confirms unsafe `.env` loading guidance that can execute file contents. Additional risks include unpinned package execution, broad filesystem access, unrestricted autonomous tools, and secret-printing troubleshooting.

Files scanned

2,249

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (5)

High

references/authentication.md:223

Environment file access

Load with: \`source .env\` or \`export $(cat .env | xargs)\`

The guide recommends loading `.env` with `source`, which executes the file as shell code. A modified or untrusted environment file can run arbitrary commands.

High

references/tool-usage.md:124-155

Unrestricted Autonomous MCP Tool Access

The guide states that agents can use any MCP tool without pre-approval. State-changing tools could modify or delete external data without confirmation.

The guide explicitly says agents need no allowlist and can use every tool Claude considers necessary. No approval boundary for state-changing operations is provided.

Medium

examples/stdio-server.json:4-5 references/server-types.md:50-52 SKILL.md:74-76

Unpinned Package Execution

Examples run unpinned NPM MCP packages through `npx -y`. Package drift or registry compromise could execute changed code without review.

Three examples use `npx -y` without a version. This automatically accepts and executes whichever package version the registry resolves.

Medium

examples/stdio-server.json:3-5

Broad Project Filesystem Access

The filesystem example grants the MCP server the entire project directory. This can expose source, credentials, and configuration beyond the task.

The filesystem server receives `${CLAUDE_PROJECT_DIR}` as its allowed root. That scope covers the complete project rather than a task-specific directory.

Medium

references/authentication.md:364-370

Secret Exposure During Troubleshooting

The troubleshooting example prints the complete API token to the terminal. Tokens can enter transcripts, logs, screen recordings, or shared support output.

The example runs `echo $API_TOKEN`, which displays the full credential. This directly conflicts with the guide's instruction not to log tokens.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

references/authentication.md:223

Shell command substitution

Load with: \`source .env\` or \`export $(cat .env | xargs)\`

The guide recommends `export $(cat .env | xargs)`, which performs command substitution and unsafe word splitting on file contents. Crafted values can alter arguments or trigger unintended shell behavior.

Risk Factors

🌐 Network access (37)

🔑 Env variables (22)

⚙️ External commands (50)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/davila7-mcp-integration/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/davila7-mcp-integration/security.svg)](https://skillstore.io/skills/davila7-mcp-integration?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/davila7-mcp-integration?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/davila7-mcp-integration/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/davila7-mcp-integration.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

davila7. (2026). MCP Integration security audit report (audit version 9) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/davila7-mcp-integration/audits/9

BibTeX citation

@techreport{davila7-davila7-mcp-integration-2026,
  author = {davila7},
  title = {MCP Integration security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/davila7-mcp-integration/audits/9},
  note = {Author version 0.1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "MCP Integration security audit report (audit version 9)"
version: "0.1.0"
type: report
authors:
  - name: "davila7"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/davila7-mcp-integration/audits/9"
identifiers:
  - type: other
    value: "skillstore:davila7-mcp-integration:audit:9"
    description: "Skillstore immutable audit report identifier"

Compare variants

4 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

anthropics Recommended

mcp-integration

Skillstore Score 68

Evidence Confidence High

Skillstore usage 19

Updated

2026-09-09

Joseph OBrien

89jobrien-mcp-integration

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 17

Updated

2026-09-09

anthropics

anthropics-mcp-integration

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 9

Updated

2026-09-09

davila7 Current

davila7-mcp-integration

Skillstore Score 38

Evidence Confidence Medium

Skillstore usage 8

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Add a Hosted MCP Server

Configure an SSE or HTTP MCP endpoint with clear auth and setup notes.

Review Local Server Configuration

Check stdio server commands, environment variables, and portable plugin paths.

Document MCP Tool Workflows

Map MCP tool names into commands, agents, and troubleshooting guidance.

Try These Prompts

Start a Basic MCP Config

Help me add a basic MCP server to my Claude Code plugin. Ask which transport I need, then outline the configuration.

Choose the Right Server Type

Compare stdio, SSE, HTTP, and WebSocket for my plugin. Recommend one based on local execution, auth, latency, and setup needs.

Plan Authentication

Design an authentication plan for my MCP integration. Cover OAuth, environment variables, token scopes, and user setup documentation.

Review a Multi-Server Workflow

Review my planned multi-server MCP plugin architecture. Check server types, allowed tools, auth boundaries, error handling, and troubleshooting coverage.