mcp-audit-skill / rules

# MCP Infrastructure Audit Suite

When the user asks to audit, test, or check MCP servers, follow these instructions:

1. Find MCP config files: `.mcp.json`, `~/.cursor/mcp.json`, `.vscode/mcp.json`, `~/.claude/claude_desktop_config.json`
2. Parse server configurations (names, commands, args, env vars)
3. Run the requested audit type:
   - **Governance**: Check 30 rules across Access Control, Security, Compliance, Data Governance, Operations
   - **Testing**: Run 39 protocol compliance tests across Protocol, Tools, Resources, Prompts, Edge Cases, Security
   - **Health**: Check connectivity, MCP handshake, latency, tool/resource availability
4. Output results as a markdown report with scores, findings, and remediation steps

For full rule details, see the SKILL.md in this project's skills/mcp-audit/ directory.