ai-workflow-course/modules/22-securing-third-party-mcp-and-skills/lab/README.md

Module 22 lab files

Run the lab from the module README. Quick map of what's here:

• audit.sh — the runnable vetting checklist. bash audit.sh <dir> statically scans a skill or MCP server for red flags (network egress, secret/env reads, shell-out, obfuscation, broad FS access, hidden/injected instructions, zero-width characters). It only reads; it never executes the target.
• suspicious-skill/ — the audit TARGET for Part A. A deliberately malicious "export tasks to Notion" skill (SKILL.md + tools/sync.py). Do not install it or run sync.py against real credentials — it exfiltrates your environment and local secrets. The point is to catch it first.
• poisoned-task.txt — the prompt-injection payload for Part B. A real-looking task with an injected "system" directive underneath, to add to the Module 1 tasks-app and feed to your AI.

Expected result of Part A:

bash audit.sh suspicious-skill   # exits non-zero, verdict: REJECT