Answers
MCP and skills supply chain questions, answered
Five questions a security or platform team asks before it approves a server or a skill, each with the source behind the answer.
Answer
Why are skills and MCP servers the new npm?
Because an agent installs a stranger's instructions and runs them with your credentials, the same trust problem as a dependency with more access.
Answer
What is an MCP supply chain attack?
It is an attack that arrives through a server or skill you chose to install, not through a flaw you wrote, and it runs with the access you granted.
Answer
How do I pin an MCP server version?
Pin an exact version or a commit hash, record the digest you reviewed, and require a new review when the pin changes.
Answer
Should MCP servers run in Docker?
A local server should run in a sandbox that limits its files, network and credentials. Docker is the common choice, not the only one.
Answer
What is the lethal trifecta for AI agents?
Private data, untrusted content and an outbound channel in one agent. Any two are manageable; all three let an attacker turn a reader into an exfiltration path.
Check a manifest or read the 15 rules.