← All skills
protect-mcp
79 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.
By scopeblind/scopeblind-gateway (GitHub) · security · 10 stars · scanned at commit c84f3f7
Configure or troubleshoot protect-mcp's local Cedar policy gate and verify its signed receipts. Use for protect-mcp setup, its MCP wrapper or coding-agent hooks, and verification of protect-mcp records; not for general security, compliance or audit requests.
Works with any agent that supports SKILL.md skills.
What this skill can do
Downloads and installs other software
The author does not mention this.
Found in 54 places.
Show 17 more
- skills/protect-mcp/SKILL.md, line 51
npx --yes protect-mcp@0.32.4 serve --enforce --cedar ./policies --policy ./protect-mcp.json - skills/protect-mcp/SKILL.md, line 68
npx --yes protect-mcp@0.32.4 init-hooks --uninstall - skills/protect-mcp/SKILL.md, line 86
npx --yes @veritasacta/verify@0.11.0 --replay-chain .protect-mcp-receipts.jsonl --key "$PROTECT_MCP_PUBLIC_KEY" --json - docs/claude-plugin.md, line 16
npx --yes protect-mcp@0.32.4 init - docs/claude-plugin.md, line 17
npx --yes protect-mcp@0.32.4 policy-packs install coding-starter --dir ./policies - docs/claude-plugin.md, line 32
npx --yes protect-mcp@0.32.4 serve --enforce --cedar ./policies --policy ./protect-mcp.json - docs/claude-plugin.md, line 107
npx --yes protect-mcp@0.32.4 serve --enforce --cedar ./policies --policy ./protect-mcp.json - docs/commands.md, line 47
Run `npx --yes protect-mcp@0.32.4 --help` for the full flag reference. - docs/local-gateway.md, line 15
npx --yes protect-mcp@0.32.4 init - docs/local-gateway.md, line 19
npx --yes protect-mcp@0.32.4 wrap -- node your-mcp-server.js - docs/local-gateway.md, line 22
npx --yes protect-mcp@0.32.4 dashboard --open - docs/local-gateway.md, line 25
npx --yes protect-mcp@0.32.4 recommend --write - docs/local-gateway.md, line 28
npx --yes protect-mcp@0.32.4 --policy protect-mcp.recommended.json --enforce -- node your-mcp-server.js - docs/local-gateway.md, line 39
npx --yes protect-mcp@0.32.4 wrap --claude-desktop - docs/local-gateway.md, line 40
npx --yes protect-mcp@0.32.4 wrap --claude-desktop --write - docs/local-gateway.md, line 41
npx --yes protect-mcp@0.32.4 dashboard --open - docs/local-gateway.md, line 45
not upload anything. Use `npx --yes protect-mcp@0.32.4 connect` only if you explicitly want a
and 34 more places
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a security skill.
Found in 9 places.
Show 6 more
- skills/protect-mcp/SKILL.md, line 85
PROTECT_MCP_PUBLIC_KEY=$(node -p 'JSON.parse(require("node:fs").readFileSync("keys/gateway.json", "utf8")).publicKey') - docs/local-gateway.md, line 175
| `starter.pipe-network-to-shell` | `curl` or `wget` into `sh`, `bash` or `zsh`, or `bash <(curl`, `sh -c "$(curl`, `eval "$(curl` | - .mcp.json, line 4
"command": "npx", - hooks/hooks.json, line 10
"command": "node", - hooks/hooks.json, line 27
"command": "node", - mcp.json, line 4
"command": "npx",
Connects to the internet
This is disclosed by the author in the skill's SKILL.md or README. It runs automatically when the plugin is installed. Expected for a security skill.
Found in 1 place.
Safer alternatives
Low-risk skills in the same category (security) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'protect-mcp' ] || [ -L ~/.agents/skills/'protect-mcp' ]; then echo 'A skill folder named protect-mcp already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/scopeblind/scopeblind-gateway' "$d" && git -C "$d" checkout --quiet 'c84f3f7359ef053cab46a455e6f21a098891a573' -- 'skills/protect-mcp' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/protect-mcp' ~/.agents/skills/'protect-mcp' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'protect-mcp' ~/.claude/skills/'protect-mcp' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for scopeblind/scopeblind-gateway shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/scopeblind/scopeblind-gateway/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | c84f3f7 | 79 |