[Phase 1.3] Create security-scanner skill - CVE Search + MCP Validator #44

Open
opened 2026-04-06 23:02:01 +00:00 by NW · 0 comments
Owner

User Story

As a security-auditor agent, I need access to CVE Search MCP and MCP Validator so that I can scan for vulnerabilities and validate MCP server compliance.

Acceptance Criteria

  • Create .kilo/skills/security-scanner/SKILL.md
  • Document CVE Search MCP integration
  • Document MCP Validator integration
  • Update security-auditor agent to use CVE Search
  • Add /security-scan command

MCP Servers

CVE Search MCP (Public Data)

  • Search vulnerabilities by vendor/product
  • CVE details and severity scores
  • No API key required

MCP Validator (Open Source)

  • Validate MCP server tools/resources
  • Compliance testing
  • Stress testing

Files to Modify

  • .kilo/skills/security-scanner/SKILL.md (create)
  • .kilo/agents/security-auditor.md (update)
  • .kilo/commands/security-scan.md (create)

Milestone

Phase 1: MCP Integration - Core Dev Tools #54

## User Story As a security-auditor agent, I need access to CVE Search MCP and MCP Validator so that I can scan for vulnerabilities and validate MCP server compliance. ## Acceptance Criteria - [ ] Create .kilo/skills/security-scanner/SKILL.md - [ ] Document CVE Search MCP integration - [ ] Document MCP Validator integration - [ ] Update security-auditor agent to use CVE Search - [ ] Add /security-scan command ## MCP Servers ### CVE Search MCP (Public Data) - Search vulnerabilities by vendor/product - CVE details and severity scores - No API key required ### MCP Validator (Open Source) - Validate MCP server tools/resources - Compliance testing - Stress testing ## Files to Modify - .kilo/skills/security-scanner/SKILL.md (create) - .kilo/agents/security-auditor.md (update) - .kilo/commands/security-scan.md (create) ## Milestone Phase 1: MCP Integration - Core Dev Tools #54
Sign in to join this conversation.