Agent skill · Audited from source

Mcp Operations

skill · hoangsonww/Claude-Code-Agent-MonitorMIT licenceAudited 16 Oct 2026 · source 1f059c400d07

★ 1,080pushed 4 days ago

✓SAFEGrade B · 89/100 · 16 Oct 2026 · 1f059c4

1,080repo stars · whole hoangsonww/Claude-Code-Agent-Monitor

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 1f059c400d07 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Operate and maintain the local MCP server for this project. Use when creating MCP host config, troubleshooting tool connectivity, modifying tool domains, or adjusting safety policy flags.

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Mcp Operations (hoangsonww/Claude-Code-Agent-Monitor)”. Retrieved 16 Oct 2026. https://modelsatlas.com/skills/hoangsonww/mcp-operations

Trust audit

Audit 0.4.1 · source read 16 Oct 2026

Trust score89/100✓SAFE B

0 critical0 high0 medium2 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

FilesystemNone observedNo reads or writes in the source
NetworkNone observedNo outbound calls in the source
ShellNone observedNo commands run in the source
DependenciesPinnedNothing floats
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	PASS	0
`L1` Static source	Secrets, path traversal, supply chain, hidden code	NA	2
`L2` Instructions	Prompt injection, authority framing, hidden directives	PASS	0
`L3` Inventory	The files and declarations match the source	PASS	0
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass.

Findings (2)

LOWNetwork egressnet.raw_ip · references/host-config.md:10

F-04 Network egressCWE-200 · CWE-319Layer L1

- `MCP_DASHBOARD_BASE_URL=http://127.0.0.1:4820`

Why: No further detail recorded for this rule.
Fix: —

LOWNetwork egressnet.raw_ip · references/runbook.md:20

F-04 Network egressCWE-200 · CWE-319Layer L1

- `curl -s http://127.0.0.1:8819/health` reports `activeSessions`; a count that only ever climbs means clients are dropping without terminating.

Why: No further detail recorded for this rule.
Fix: —

Audit 0.4.1 · source sha 1f059c400d07 · 16 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

Publisherhoangsonww GitHub userOwner of the repository this skill is read from
Source folderhoangsonww/Claude-Code-Agent-Monitor/.claude/skills/mcp-operationsThe exact folder we audited
LicenceMITAs the repository states it
Commit pinned for this verdict1f059c400d07A new audit runs when the source changes
Repository statusNot archivedLast push 4 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Operate and maintain the local MCP server for this project. Use when creating MCP host config, troubleshooting tool connectivity, modifying tool domains, or adjusting safety policy flags.

---
name: mcp-operations
description: Operate and maintain the local MCP server for this project. Use when creating MCP host config, troubleshooting tool connectivity, modifying tool domains, or adjusting safety policy flags.
---

# MCP Operations

Use this skill whenever work touches `mcp/` behavior or MCP host integration.

## Core workflow
- Confirm dashboard API is running (`/api/health`).
- Confirm MCP server build status.
- Validate env flags for mutation/destructive modes.
- Verify host configuration path and command.

## Safe operations policy
- Default to read-only mode (`MCP_DASHBOARD_ALLOW_MUTATIONS=false`).
- Enable mutations only for explicit admin tasks.
- Enable destructive mode only transiently and require explicit confirmation token.

## Required verification for code changes
- `npm run mcp:typecheck`
- `npm run test:mcp`
- `npm run mcp:build`

## Catalog invariant
- Add tools only through `mcp/src/tools/domains/` and `registerAllTools`.
- Protocol transports and REPL must use the same declarations and schemas.
- Update `.agents/skills/mcp-maintainer/references/tool-domain-map.md` when a domain changes.

## References
- Host config examples: `references/host-config.md`
- Operations runbook: `references/runbook.md`

Excerpt, first 1,250 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 1f059c4

Download folder ↗

git clone https://github.com/hoangsonww/Claude-Code-Agent-Monitor
git -C Claude-Code-Agent-Monitor checkout 1f059c400d07

The author documents no install command, so this uses the repository directly. Our verdict covers commit 1f059c400d07 only.

Works in which agents?

What its own text says, not a test

“Mentioned” means the skill’s text names the agent. We have not run it there.
Agent	Status	More
Codex	Mentioned in its text, not tested	Skills for Codex · About Codex

Audit history

Every audit, every source change

2026-10-16
✓SAFE B 89 / 100
first audit · source 1f059c400d07

README badge

For maintainers · shows the latest audit

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/hoangsonww/mcp-operations/badge.svg)](https://modelsatlas.com/skills/hoangsonww/mcp-operations/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.