mcp-security-hardening
✓MCP security patterns for prompt injection defense, tool poisoning prevention, and permission management. Use when securing MCP servers, validating tool descriptions, implementing allowlists.
Installation
SKILL.md
Defense-in-depth security patterns for Model Context Protocol (MCP) integrations.
Treat ALL tool descriptions as untrusted input. Validate tool identity with hash verification. Apply least privilege to all tool capabilities.
| Tool Poisoning (TPA) | Zero-trust allowlist | Hash verification, mandatory vetting | | Prompt Injection | Description sanitization | Regex filtering, encoding detection | | Rug Pull | Change detection | Hash comparison on each invocation | | Data Exfiltration | Output filtering | Sensitive pattern removal |
MCP security patterns for prompt injection defense, tool poisoning prevention, and permission management. Use when securing MCP servers, validating tool descriptions, implementing allowlists. Source: yonatangross/orchestkit.
Facts (cite-ready)
Stable fields and commands for AI/search citations.
- Install command
npx skills add https://github.com/yonatangross/orchestkit --skill mcp-security-hardening- Source
- yonatangross/orchestkit
- Category
- !Security
- Verified
- ✓
- First Seen
- 2026-02-01
- Updated
- 2026-02-18
Quick answers
What is mcp-security-hardening?
MCP security patterns for prompt injection defense, tool poisoning prevention, and permission management. Use when securing MCP servers, validating tool descriptions, implementing allowlists. Source: yonatangross/orchestkit.
How do I install mcp-security-hardening?
Open your terminal or command line tool (Terminal, iTerm, Windows Terminal, etc.) Copy and run this command: npx skills add https://github.com/yonatangross/orchestkit --skill mcp-security-hardening Once installed, the skill will be automatically configured in your AI coding environment and ready to use in Claude Code or Cursor
Where is the source repository?
https://github.com/yonatangross/orchestkit
Details
- Category
- !Security
- Source
- skills.sh
- First Seen
- 2026-02-01