The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends using npx to download and execute various MCP server packages and setup utilities, including @modelcontextprotocol/server-postgres, @modelcontextprotocol/server-filesystem, and ctx7. It targets well-known package registries and services.
[COMMAND_EXECUTION]: Provides instructions for running local shell commands to manage configurations and tool setups, such as copilot mcp add, npx ctx7 setup, and npm audit. These are standard management operations for the described environment.
[CREDENTIALS_UNSAFE]: While the skill mentions sensitive configuration fields like DATABASE_URL and API_KEY, it correctly instructs users to use environment variable placeholders (e.g., ${env:MY_API_KEY}) and provides benign placeholders for examples, preventing hardcoded credentials.
[SAFE]: The documentation includes a dedicated section on security considerations, specifically advising users to review server dependencies, prefer pinned versions, and validate third-party server permissions before integration.

mcp-ecosystem