Claude Codepasses structure
Checker 0.1.0 · agent-skills-2026-08-13+claude-code-docs-2026-08-13 · 9/9/2026.claude/skills/mcp-config-security-checkupRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Real Skill packageSource verifiedClawHub registry
MCP Security Audit & Config Checkup
MCP security audit for AI-agent configs — run it before connecting any MCP server. 14 automated static rules catch hardcoded credentials, arbitrary command execution, writable mounts, SSRF attack surface, prompt-injection risks, plaintext HTTP endpoints and unpinned remote launchers, so unsafe agent tool calls get stopped before they run. Outputs CRIT/HIGH/MED/LOW findings with concrete fix advice. Runs 100% locally with zero network calls. Use when reviewing, auditing or scanning an MCP/agent server config (mcpSe…
Identity and source
Publisher attributionCorrectoverregistry owner unverified by skillvetai
Functional categoryAgent Engineering, Security & Governanceautomatically inferred · 66% rule confidence
Package forminstruction with code7 recorded files
Canonical sourceClawHub registryclawhub:dshcorrectover:mcp-config-security-checkup
Platform declarations
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
OpenClawnative officialProvenance: registry distribution
Independent structural checks
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
OpenAI Codexpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+codex-docs-2026-08-13 · 9/9/2026.agents/skills/mcp-config-security-checkupRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
OpenClawpasses structure
Checker 0.1.0 · agent-skills-2026-08-13+openclaw-docs-2026-08-13 · 9/9/2026skills/mcp-config-security-checkupRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
Installation and inspection
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @dshcorrectover/mcp-config-security-checkupclawhub inspect @dshcorrectover/mcp-config-security-checkup --version 1.0.1Security evidence
SkillVetAI static result: no findings detected
This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
- Status
- completed
- Coverage
- full text content
- Files
- 6 / 7 inspected as text
- Checked
- 9/9/2026, 4:42:48 PM
- Scanner
- 0.1.3
- Policy
- 1.0.3
4 inferred permission indicators
- network access — automatically inferred
- filesystem write — automatically inferred
- credential access — automatically inferred
- browser control — automatically inferred
3 dependency and API indicators
- api: 169.254.169.254
- api: clawhub.ai
- api: correctover.com
External clawhub result: suspicious
This is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
- Evidence checked
- 9/9/2026, 1:56:20 PM
- Release binding
- Matches this record
- skillspector: suspicious
- llm: suspicious
Recorded files
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
Package content hash
sha256:88f7b3fe12c8d5d15dde091511ad5a08efecf75b69c30bf0ac49c3977d0ef90bShow up to 7 recorded paths
assets/icon.jpgexamples/mcp_dangerous.jsonscripts/ccs_online_client.pyscripts/mcp_checkup.pyscripts/mcp_rules.pyskill-card.mdSKILL.md
Source changelog
- Documentation refreshed with a more concise and action-focused introduction for broader accessibility. - Obsolete skill-card.md file removed for clarity and maintainability. - No functional changes to core functionality; all code and static analysis checks remain unchanged.