Install
$ agentstack add skill-arnie016-codex-prompt-templates-mcp-server-lab ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
MCP Server Lab
Treat every MCP server as a tool surface that needs inspection before trust.
Intake Checklist
- Read README and license.
- Inspect manifests and install scripts.
- Identify transport: stdio, HTTP, SSE, hosted.
- Identify auth and secrets.
- List tools/resources/prompts.
- Classify each tool by capability: read, write, shell, network, filesystem, credential-sensitive.
- Test with a disposable project first.
MCPJam Flow
When MCPJam is available, prefer JSON outputs:
npx @mcpjam/inspector@latest
mcpjam server probe --url --quiet --format json
mcpjam tools list --url --quiet --format json
For CI gates, JUnit/XML reports, protocol/OAuth/apps conformance matrices, or tool-surface release diffs, switch to $auto-skill-build-mcp-conformance-harness.
For local stdio servers, use the terminal or desktop inspector rather than the hosted web app.
Output
# MCP Integration Report
## Server
## Transport/Auth
## Tools
## Safe Use Cases
## Risky Capabilities
## Test Result
## Codex Config Snippet
Read references/mcp-server-catalog.md for server selection and safety rules.
Validation
- Transport, auth, and tool list are documented before integration.
- Shell/filesystem/network/account-control tools route through
$mcp-safety-review. - CI/release-gate requests route to
$auto-skill-build-mcp-conformance-harness.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Arnie016
- Source: Arnie016/codex-prompt-templates
- License: MIT
- Homepage: https://github.com/Arnie016/codex-prompt-templates
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.