What it does

Detects MCP "rug pulls", where a server you already approved quietly changes a tool description or schema, adds or removes tools, shadows another server's tool name,…

Use when the user asks "did my MCP tools change", "pin my MCP servers", "check for MCP rug pull", "is this MCP tool description safe", "has my MCP server been tampered with", "approve these MCP tools", "add an MCP…

How it arrives

You don't install skills one by one. ClevskillSetup installs the whole curated pack, wires the safety hooks, and verifies each skill actually runs on your machine. The weekly health scan re-checks it from then on, and repairs route through your approval.

Setup

No setup needed. It works as soon as the pack is installed; no accounts, no API keys, nothing leaves your machine.

Invoke it

In Claude Code or Claude Cowork, just ask in plain language; skills trigger on intent. Things people say that make this skill run:

you: use mcp rugpull guard on this
claude: [mcp-rugpull-guard runs, result returned with full audit log]

Part of the security suite: it runs automatically where it applies, fails closed on errors, and never sends your content anywhere.