Agent skill · Audited from source
mcp-management
skill · mrgoonie/claudekit-skillsLicence not declaredAudited 31 Oct 2026 · source d655ab03f566
Is it safe? With care — CAUTION, grade B (88/100). We read this skill's source at commit d655ab03f566 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 6 findings, 0 critical or high. What it does: Manage Model Context Protocol (MCP) servers - discover, analyze, and execute tools/prompts/resources from configured MCP servers. Use when working with MCP integrations, need to discover available MCP capabilities,…
Cite
Cite this page
ModelsAtlas. “mcp-management (mrgoonie/claudekit-skills)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/mrgoonie/mcp-management
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesNot pinnedSome versions float
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 1 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (6)
MEDIUMInventory / provenanceinv.symlink · plugins/ai-ml-tools/skills/ai-multimodal
plugins/ai-ml-tools/skills/ai-multimodal
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/ai-ml-tools/skills/context-engineering
plugins/ai-ml-tools/skills/context-engineering
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/ai-ml-tools/skills/google-adk-python
plugins/ai-ml-tools/skills/google-adk-python
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/backend-tools/skills/backend-development
plugins/backend-tools/skills/backend-development
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · plugins/backend-tools/skills/better-auth
plugins/backend-tools/skills/better-auth
- Why
- link not followed
- Fix
- —
LOWSupply chainsupply.unpinned · scripts/package.json
@modelcontextprotocol/sdk, @types/node, typescript, tsx
- Why
- 4 dependency range(s) float
- Fix
- pin exact versions or ship a lockfile
Audit 0.4.1 · source sha d655ab03f566 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishermrgoonie GitHub userOwner of the repository this skill is read from
- Source foldermrgoonie/claudekit-skills/.claude/skills/mcp-managementThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdictd655ab03f566A new audit runs when the source changes
- Repository statusNot archivedLast push 210 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Manage Model Context Protocol (MCP) servers - discover, analyze, and execute tools/prompts/resources from configured MCP servers. Use when working with MCP integrations, need to discover available MCP capabilities,…
---
name: mcp-management
description: Manage Model Context Protocol (MCP) servers - discover, analyze, and execute tools/prompts/resources from configured MCP servers. Use when working with MCP integrations, need to discover available MCP capabilities, filter MCP tools for specific tasks, execute MCP tools programmatically, access MCP prompts/resources, or implement MCP client functionality. Supports intelligent tool selection, multi-server management, and context-efficient capability discovery.
---
# MCP Management
Skill for managing and interacting with Model Context Protocol (MCP) servers.
## Overview
MCP is an open protocol enabling AI agents to connect to external tools and data sources. This skill provides scripts and utilities to discover, analyze, and execute MCP capabilities from configured servers without polluting the main context window.
**Key Benefits**:
- Progressive disclosure of MCP capabilities (load only what's needed)
- Intelligent tool/prompt/resource selection based on task requirements
- Multi-server management from single config file
- Context-efficient: subagents handle MCP discovery and execution
- Persistent tool catalog: automatically saves discovered tools to JSON for fast reference
## When to Use This Skill
Use this skill when:
1. **Discovering MCP Capabilities**: Need to list available tools/prompts/resources from configured servers
2. **Task-Based Tool Selection**: Analyzing which MCP tools are relevant for a specific task
3. **Executing MCP Tools**: Calling MCP tools programmatically with proper parameter handling
4. **MCP Integration**: Building or debugging MCP client implementations
5. **Context Management**: Avoiding context pollution by delegating MCP operations to subagents
## Core Capabilities
### 1. Configuration Management
MCP servers configured in `.claude/.mcp.json`.
**Gemini CLI Integration** (recommended): Create symlink to `.gemini/settings.json`:
```bash
mkdir -p .gemini && ln -sf .claude/.mcp.json .gemini/settings.json
```
See [references/configuration.md](references/configuration.md) and [references/gemini-cli-integration.md](references/gemini-cli-integration.md).
### 2. Capability Discovery
```bash
npx tsx scripts/cli.ts list-tools # Saves to assets/tools.json
npx tsx scripts/cli.ts list-prompts
npx tsx scripts/cli.ts list-resources
```
Aggregates capabilities from multiple servers with server identification.
### 3. Intelligent Tool Analysis
LLM analyzes `assets/tools.json` directly - better than keyword matching algorithms.
### 4. Tool Execution
**Primary: Gemini CLI** (if available)
```bash
gemini -y -m gemini-2.5-flash -p "Take a screenshot of https://example.com"
```
**Secondary: Direct Scripts**
```bash
npx tsx scripts/cli.ts call-tool memory create_entities '{"entities":[...]}'
```
**Fallback: mcp-manager Subagent**
See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete examples.
## Implementation Patterns
### Pattern 1: Gemini CLI Auto-Execution (Primary)
Use Gemini CLI for automatic tool discovery and execution. See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete guide.
**Quick Example**:
```bash
gemini -y -m gemini-2.5-flash -p "Take a screenshot of https://example.com"
```
**Benefits**: Automatic tool discovery, natural language execution, faster than subagent orchestration.
### Pattern 2: Subagent-Based Execution (Fallback)
Use `mcp-manager` agent when Gemini CLI unavailable. Subagent discovers tools, selects relevant ones, executes tasks, reports back.
**Benefit**: Main context stays clean, only relevant tool definitions loaded when needed.
### Pattern 3: LLM-Driven Tool Selection
LLM reads `assets/tools.json`, intelligently selects relevant tools using context understanding, synonyms, and intent recognition.
### Pattern 4: Multi-Server Orchestration
Coordinate tools across multiple servers. Each tool knows its source server for proper routing.
## Scripts Reference
### scripts/mcp-client.ts
Core MCP client manager class. Handles:
- Config loading from `.claude/.mcp.json`
- Connecting to multiple MCP servers
- Listing tools/prompts/resources across all servers
- Executing tools with proper error handling
- Connection lifecycle management
### scripts/cli.ts
Command-line interface for MCP operations. Commands:
- `list-tools` - Display all tools and save to `assets/tools.json`
- `list-prompts` - Display all prompts
- `list-resources` - Display all resources
- `call-tool <server> <tool> <json>` - Execute a tool
**Note**: `list-tools` persists complete tool catalog to `assets/tools.json` with full schemas for fast reference, offline browsing, and version control.
## Quick Start
**Method 1: Gemini CLI** (recommended)
```bash
npm install -g gemini-cli
mkdir -p .gemini && ln -sf .claude/.mcp.json .gemini/settings.json
gemini -y -m gemini-2.5-flash -p "Take a screenshot of https://example.com"
```
**Method 2: Scripts**
```bash
cd .claude/skills/mcp-management/scripts && npm install
npx tsx cli.ts list-tools # Saves to assets/tools.json
npx tsx cli.ts call-tool memory create_entities '{"entities":[...]}'
```
**Method 3: mcp-manager Subagent**
See [references/gemini-cli-integration.md](references/gemini-cli-integration.md) for complete guide.
## Technical Details
See [references/mcp-protocol.md](references/mcp-protocol.md) for:
- JSON-RPC protocol details
- Message types and formats
- Error codes and handling
- Transport mechanisms (stdio, HTTP+SSE)
- Best practices
## Integration Strategy
### Execution Priority
1. **Gemini CLI** (Primary): Fast, automatic, intelligent tool selection
- Check: `command -v gemini`
- Execute: `gemini -y -m gemini-2.5-flash -p "<task>"`
- Best for: All tasks when available
2. **Direct CLI Scripts** (Secondary): Manual tool specification
- Use when: Need specific tool/server control
- Execute: `npx tsx scripts/cli.ts call-tool <server> <tool> <args>`
3. **mcp-manExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit d655ab0
npm install npm install -g gemini-cli
git clone https://github.com/mrgoonie/claudekit-skills git -C claudekit-skills checkout d655ab03f566
Commands as the repository documents them: shown, never run by us. Our verdict covers commit d655ab03f566 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Gemini CLI | Mentioned in its text, not tested | Skills for Gemini CLI · About Gemini CLI |
Audit history
Every audit, every source change
- !CAUTION B 88 / 100
first audit · source
d655ab03f566
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/mrgoonie/mcp-management/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
n8n-io/n8n
Product content designer for UI copy. Use when writing, reviewing, or auditing user-facing text: button labels, error messages, tooltips, empty states, modal copy, placeholder text, confirmation dialogs, onboarding…
Imbad0202/academic-research-skills
Multi-perspective academic paper review with dynamic reviewer personas. Runs a 5-seat, role-separated review panel (Journal-Fit Reviewer + 3 peer-review roles + Devil's Advocate) with field-specific expertise; role…
pingcap/tidb
TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.
Add this badge to your README
[](https://modelsatlas.com/skills/mrgoonie/mcp-management/)
<a href="https://modelsatlas.com/skills/mrgoonie/mcp-management/"><img src="https://modelsatlas.com/skills/mrgoonie/mcp-management/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about mcp-management
What does the mcp-management skill do?
Is mcp-management safe to install?
What can mcp-management access on my machine?
Which assistants does mcp-management work with?
How current is this page?
Sources
- github.com/mrgoonie/claudekit-skills/tree/main/.claude/skills/mc — the audited source at commit d655ab03f566 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the mcp-management skill do?
- Is mcp-management safe to install?
- What can mcp-management access on my machine?