skills.rest
aist-ai-sast
aist-ai-sastOFFICIAL
Explore all skills by this author →
GitHub

mcp-tool-add

Automate secure MCP server tool additions with logging, path guards, and isolated tests.

Updated Aug 31, 2025
Search Tags:#security#mcp#system-prompt#test-isolation#path-traversal#tool-add#logging-decorator
One-click install
npx skills add https://github.com/aist-ai-sast/aist --skill mcp-tool-add
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mcp-tool-add
Source: https://github.com/aist-ai-sast/aist/tree/main/.claude/skills/mcp-tool-add
Command: npx skills add https://github.com/aist-ai-sast/aist --skill mcp-tool-add

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Tool addition to the MCP context extractor can be error-prone without enforcing best practices. This Skill ensures new tools follow defined patterns to maintain security and consistency.

Core Features & Use Cases

  • Enforces @log_tool decorator usage for new tools added to MCP server.
  • Implements path traversal guards to prevent directory traversal risks.
  • Requires isolated tests to validate new tool behavior without side effects.
  • Updates system prompts to reflect new tool integration for AI workflows.
  • Use Case: When onboarding a new tool to the MCP server, run this Skill to validate patterns and generate a compliant integration plan.

Quick Start

Follow these steps to add a new tool to the MCP server while applying the required patterns and tests.

Frequently Asked Questions about mcp-tool-add

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does adding tools to the MCP context extractor require pattern enforcement?▼

Adding tools to the MCP context extractor requires pattern enforcement because manual integration is error-prone, and defined patterns maintain security, consistency, and reliability across development and review phases.

How do I test new MCP server tools without side effects?▼

To test new MCP server tools without side effects, use isolated tests that validate the new tool behavior independently, ensuring that integration does not introduce unintended side effects into the broader system.

Do I need to update the system prompt when onboarding a new MCP tool?▼

Yes, the @log_tool decorator is required for new MCP server tools to enforce consistent logging patterns, which satisfies compliance and reliability requirements during the tool addition workflow.

What is the best way to prevent directory traversal risks in MCP tools?▼

The best way to prevent directory traversal risks in MCP tools is to implement path traversal guards during the tool addition workflow, blocking unauthorized file access and securing the context extractor.

Related Skills

Explore More Software Engineering Skills→
zhangzhang-111-izhangzhang-111-i
2

mcp-server-builder

Generate MCP server scaffolds and tool manifests from OpenAPI specifications.

Community
Advanced
CaptainPhantasyCaptainPhantasy

mcp-builder

Convert MCP tool ideas into validated server packages with tool catalogs and test harnesses.

Community
Advanced
zorak1103zorak1103
5

ha-mcp-tools

Select the appropriate ha-mcp tool and action for Home Assistant tasks.

Community
Intermediate
jnPiyushjnPiyush

code-review-and-audit

Automate code review, security audits, and compliance verification in CI/CD pipelines.

Community
Advanced