Skip to content
Back to skills

Mcp Workflow Audit

ASecurity

Audit Claude Code, MCP, and AI-agent workflows for permissions, consequential actions, idempotency, failure recovery, verification, and operator handoff.

  • 61 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 7, 2026
ai-agentsgonodetestinggit

Works with

  • claude code
  • mcp

Security analysis

A100/100

Scanned November 7, 2026

npx -y skills add agentskillexchange/skills --skill mcp-workflow-audit --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Mcp Workflow Audit?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Mcp Workflow Audit
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/agentskillexchange-mcp-workflow-audit/badge)](https://www.skillsdirectory.com/skills/agentskillexchange-mcp-workflow-audit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "MCP Workflow Audit"
slug: "mcp-workflow-audit"
description: "Audit Claude Code, MCP, and AI-agent workflows for permissions, consequential actions, idempotency, failure recovery, verification, and operator handoff."
github_stars: 0
verification: "listed"
source: "https://github.com/OssaBellator/claude-mcp-workflow-audit"
author: "OssaBellator"
category: "Developer Tools"
framework: "Claude Code"
tool_ecosystem:
  github_repo: "ossabellator/claude-mcp-workflow-audit"
  github_stars: 0
---

# MCP Workflow Audit

MCP Workflow Audit is a read-first operational audit workflow for Claude Code, Model Context Protocol integrations, and AI-agent automations. Use it when an agent workspace works inconsistently, has accumulated MCP configuration, performs consequential external writes, or needs a maintainable handoff before further automation is added. The workflow inventories instructions, MCP configuration, Skills, hooks, scheduled automation, package metadata, and credential boundaries; maps external writes and approval points; and reviews least privilege, bounded retries, idempotency, missing or conflicting data, partial-failure recovery, and post-action verification. It explicitly treats scanner findings as heuristics rather than proof, avoids destructive testing, and does not broaden permissions merely to make a workflow pass. The upstream MIT-licensed repository also provides a dependency-free static scanner, regression tests, workflow contracts, and synthetic appointment, trades-operations, and retail-pricing references.

## Installation

Install or set up from the source-backed instructions:

git clone https://github.com/OssaBellator/claude-mcp-workflow-audit.git; run node audit.mjs /path/to/workspace or node report.mjs /path/to/workspace > audit-report.md

- Source: https://github.com/OssaBellator/claude-mcp-workflow-audit

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.