Owasp MCP

microsoft/owasp-mcp

OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.

11k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

1313

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/microsoft/hve-core --skill owasp-mcp

43 134 bytes besides the instruction

references/00-vulnerability-index.md

references/01-token-mismanagement-secret-exposure.md

references/02-privilege-escalation-scope-creep.md

references/03-tool-poisoning.md

references/04-supply-chain-attacks-dependency-tampering.md

references/05-command-injection-execution.md

references/06-prompt-injection-contextual-payloads.md

references/07-insufficient-authentication-authorization.md

references/08-lack-of-audit-telemetry.md

references/09-shadow-mcp-servers.md

references/10-context-injection-over-sharing.md

3 sections, as written by the author

This SKILL.md is the entrypoint for the MCP Vulnerabilities skill.

The skill encodes the OWASP MCP Top 10 (2025) as structured, machine-readable references

that an agent can query to identify, assess, and remediate MCP security risks.

10. 09 Shadow MCP Servers

11. 10 Context Injection and Over-Sharing

SKILL.md — this file (skill entrypoint).
references/ — the MCP Top 10 normative documents.
00-vulnerability-index.md — index of all vulnerability identifiers, severities, and cross-references.
01 through 10 — one document per vulnerability aligned with OWASP MCP numbering.

Copy the folder

Take microsoft/owasp-mcp from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.