skillhash

Is mcp-integration safe?

Grade A, 100/100. No meaningful risk found.

This skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect external service", mentions "${CLAUDE_PLUGIN_ROOT} with MCP", or discusses MCP server types (SSE, stdio, HTTP, WebSocket). Provides comprehensive guidance for integrating Model Context Protocol servers into Claude Code plugins for external tool and service integration.

A

mcp-integration

plugins/plugin-dev/skills/mcp-integration
100/100 · No meaningful risk foundNo security findings

This skill should be used when the user asks to "add MCP server", "integrate MCP", "configure MCP in plugin", "use .mcp.json", "set up Model Context Protocol", "connect external service", mentions "${CLAUDE_PLUGIN_ROOT} with MCP", or discusses MCP server types (SSE, stdio, HTTP, WebSocket). Provides comprehensive guidance for integrating Model Context Protocol servers into Claude Code plugins for external tool and service integration.

Content hash
sha256:e4cda25e973010e205157a20c973eb5325aa413f874b6a8520ee864db884a39a
Files
7
Quality
100/100

Security findings

None of the 30 rules matched.

Quality

  • infoSKILL.md is longSL705 · plugins/plugin-dev/skills/mcp-integration/SKILL.md:1
    555 lines

    Long skills spend context on every load. Fix: Keep SKILL.md under 500 lines and move reference material into linked files.

Files in this skill
  • SKILL.md12.2 KB
  • examples/http-server.json502 B
  • examples/sse-server.json337 B
  • examples/stdio-server.json686 B
  • references/authentication.md9.9 KB
  • references/server-types.md10.3 KB
  • references/tool-usage.md11.4 KB

Questions about mcp-integration

Is mcp-integration safe to install?
Our scanner gave mcp-integration grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install mcp-integration in Claude Code or Codex?
Run skillhash add github:anthropics/claude-plugins-official/plugins/plugin-dev/skills/mcp-integration. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if mcp-integration changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from anthropics/claude-plugins-official