skills.rest
1stIndeXR
1stIndeXRCOMMUNITY
Explore all skills by this author →
GitHub

agentic-security-review

Validate security-scanner evidence and produce Pass, Block, or Incomplete release decisions.

Updated Jul 29, 2026
Search Tags:#mcp#prompt injection#release gate#release governance#agentic security#scanner evidence
One-click install
npx skills add https://github.com/1stIndeXR/agentic-security-review-skill --skill agentic-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agentic-security-review
Source: https://github.com/1stIndeXR/agentic-security-review-skill/tree/main
Command: npx skills add https://github.com/1stIndeXR/agentic-security-review-skill --skill agentic-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you assess security-scanner evidence, review agentic systems for instruction and capability risks, and make read-only release-gate decisions when security is the explicit concern.

Core Features & Use Cases

  • Evidence validation: Confirms whether scanner results actually match the intended revision, scope, configuration, and coverage.
  • Agentic security review: Reviews AI agents, skills, plugins, MCP servers, tools, hooks, retrieval, memory, delegation, and prompt-injection paths.
  • Release governance: Produces Pass, Block, or Incomplete decisions for security-sensitive launches, with a clear source-only fallback when scanner evidence is unavailable.
  • Use case: Use it when a scan exists and you need to verify its meaning, or when an MCP server or agent workflow needs a security-focused review before release.

Quick Start

Ask for a read-only security review of the supplied scanner evidence, source code, or agentic system and specify whether you want evidence overlay, source-only fallback, or a release-gate assessment.

Frequently Asked Questions about agentic-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate security scanner evidence for an AI agent release gate?▼

To validate security scanner evidence for an agentic release gate, confirm that scanner results match the intended revision, scope, configuration, and coverage before producing a fail-closed Pass, Block, or Incomplete decision.

How do I review MCP servers and AI plugins for prompt injection risks?▼

Reviewing MCP servers and AI plugins for prompt injection risks involves a read-only assessment of source code, trust boundaries, and delegation paths to identify instruction and capability vulnerabilities before release.

What is a fail-closed security review for agentic systems?▼

A fail-closed security review for agentic systems is a release-governance assessment that produces a Block or Incomplete decision when scanner evidence is unavailable or insufficient, defaulting to a source-only fallback rather than approving.

Can I use a security review tool for MCP servers without existing scanner artifacts?▼

Yes, you can perform a security review for MCP servers without scanner artifacts by requesting a source-only fallback review that analyzes source code and trust boundaries directly to produce a release-gate decision.

What are the limitations of a source-only fallback security review for AI agents?▼

A limitation of a source-only fallback security review for AI agents is that without scanner evidence, the read-only source and trust boundary analysis may miss runtime vulnerabilities, resulting in an Incomplete release-gate decision.

Related Skills

Explore More Legal & Compliance Skills→
sjinkssjinks

security-review-owasp-software-supply-chain-security

Review software supply chain security weaknesses across source control, build pipelines, and artifacts.

Community
Advanced
mschuerigmschuerig

bmad-testarch-nfr

Evaluate non-functional requirements with evidence-based validation and deterministic outcomes.

Community
Advanced
offers-pngoffers-png

threat_modeling

Identify and document security threats into a threat_model.md report.

Community
Advanced
uphiagouphiago
1.1k

hunt-llm-ai

Identify exploitable LLM/AI vulnerabilities crossing trust boundaries with validation gates.

Community
Advanced