SkillSync MCP — Security-Gated Skill Manager

Search, scan, install, and manage Claude Code skills with built-in security scanning. Every installation is gated behind a 60+ pattern threat scan.

Tools

• skillsmp_search — Search the SkillsMP marketplace by keyword
• skillsmp_ai_search — AI-powered semantic search for skills
• skillsmp_scan_skill — Security scan any GitHub skill repo
• skillsmp_search_safe — Search + auto-scan top results in one step
• skillsmp_install_skill — Scan, gate, and install a skill to ~/.claude/skills/
• skillsmp_uninstall_skill — Remove an installed skill
• skillsmp_list_installed — List installed skills with risk levels
• skillsmp_audit_installed — Deep security audit of an installed skill

Setup

Add to your MCP client config:

{
  "mcpServers": {
    "skillsmp": {
      "command": "npx",
      "args": ["-y", "@stranzwersweb2/skillsync-mcp"]
    }
  }
}

When to Use

• User asks to find, search, or browse skills
• User wants to install a skill from GitHub
• User wants to check if a skill is safe before installing
• User wants to see what skills are installed or audit them
• User mentions SkillsMP marketplace

Security

Critical threats (prompt injection, RCE, credential theft) permanently block installation. Medium/high risk requires explicit force: true. All output is sanitized against prompt injection.