MCP Agent Security Auditor — Security skill for Claude Code

🔒 AI Agent, MCP & Firebase Pre-Audit Security Scanner (v2.0)

**Lightweight static security auditor and Agent Skill for catching CWE-mapped vulnerabilities in MCP servers, AI agent hooks, and Firebase rules before shipping.**

Built by **HM Shihabuddin Jashory (Shihab)** — [Vision Flow](https://visionflowgroup.com)

---

⚡ 1. Install via AI Agent (Claude Code, Antigravity, Cursor, Codex)

Paste this single prompt into your AI coding agent:

**Prompt:** `Clone https://github.com/jashory/mcp-agent-security-auditor and run "python install.py" to install the security scanner CLI and Agent Skill.`

💻 2. Install via CLI (Terminal / Skills CLI / pip)

# Option A: Agent Skills CLI
npx skills add jashory/mcp-agent-security-auditor

# Option B: Direct Git Clone + 1-Command Installer
git clone https://github.com/jashory/mcp-agent-security-auditor.git
cd mcp-agent-security-auditor && python install.py

# Option C: Global CLI Tool via pip / uv
pip install git+https://github.com/jashory/mcp-agent-security-auditor.git
mcp-security-auditor /path/to/repo --format markdown

---

🔍 7 High-Signal CWE Security Rules Detected

1