MCP Security: Real Risks and How to Lock Down Your Setup
MCP security guide for developers: tool poisoning, prompt injection, malicious servers, and the practical steps to lock down your MCP setup.
localskills.sh Blog10 min read
localskills
30 stories
AGENTS.md vs CLAUDE.md: Which File Should You Use?
AGENTS.md vs CLAUDE.md: which context file should your repo use in 2026? Compare tool support, symlink tricks, and migration paths in both directions.
localskills.sh Blog9 min read
Are Claude Skills Safe? How to Audit Before You Install
Are Claude skills safe to install? How malicious skills use prompt injection and exfiltration, plus a 10-minute audit checklist to vet any skill.
localskills.sh Blog9 min read
Claude Code Skills vs Commands vs Subagents
Claude Code skills vs commands vs subagents, explained: how each mechanism works, what it costs in context, and when to reach for hooks instead.
localskills.sh Blog8 min read
Too Many MCP Tools? How to Fix MCP Token Bloat
Too many MCP tools can burn tens of thousands of tokens before your first prompt. Audit your MCP token usage and fix context bloat with four steps.
localskills.sh Blog9 min read
How to Build an MCP Server in TypeScript, Step by Step
Learn how to build an MCP server in TypeScript: define tools with Zod schemas, add resources and prompts, test with MCP Inspector, and deploy over Streamable HTTP.
localskills.sh Blog9 min read
MCP Transports: stdio vs Streamable HTTP vs SSE
MCP transports compared: stdio for local servers, Streamable HTTP for remote, and what the SSE deprecation means — with a decision tree and migration steps.
localskills.sh Blog9 min read
Private Skill Registry: Host Internal Agent Skills
Set up a private skill registry for your team's internal agent skills: compare git, self-hosted, and hosted options with SSO, roles, and audit logs.
localskills.sh Blog8 min read
How to Share Claude Skills With Your Team
Learn how to share Claude skills with your team: git repos, plugin marketplaces, and hosted registries, plus versioning, rollout, and usage analytics.
localskills.sh Blog8 min read
How to Build a Private Claude Code Plugin Marketplace
Build a private Claude Code plugin marketplace with marketplace.json in a git repo: setup, authentication, versioning, and a hosted alternative.
localskills.sh Blog8 min read
How to Share MCP Servers Across Your Engineering Team
Stop MCP config drift. Learn how to share MCP servers across your team with version-controlled .mcp.json, safe secrets, and server allowlists.
localskills.sh Blog8 min read
How to Debug an MCP Server with MCP Inspector
Debug an MCP server fast with MCP Inspector: launch it against stdio and remote servers, test tools interactively, read MCP logs, and catch failures in CI.
localskills.sh Blog10 min read
Showing 30 of 30 stories
You're all caught up.
AiByts Weekly Brief
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts