mp-review
CommandReview a Mercado Pago integration against the official quality checklist (live from MCP) and a fixed cross-cutting security checklist.
/mp-review [security|webhooks|checkout|qr|subscriptions|marketplace|quality|full]security|webhooks|checkout|qr|subscriptions|marketplace|quality|full- optional
What it tells Claude to do
20 linesThe prompt this command injects, verbatim. Worth reading before you run it.
# /mp-review
Audit the current project's Mercado Pago integration. Delegates to the `mp-review` skill, which orchestrates the MCP `quality_checklist` (and `quality_evaluation` when applicable) plus a fixed security floor.
## Behaviour
0. **State C check:** If neither `mcp__plugin_mercadopago_mcp__application_list` nor `mcp__plugin_mercadopago_mcp__authenticate` is visible in your tool list, the plugin is not loaded. Tell the user: *"The Mercado Pago plugin is not loaded. Run /mcp, find plugin:mercadopago:mcp, enable it, then run /mp-review again."* Stop.
1. Verify the Mercado Pago MCP is **actually authenticated** by checking that `mcp__plugin_mercadopago_mcp__application_list` is callable and returns an app. The bootstrap tools `authenticate` / `complete_authentication` always exist and prove nothing; `ListMcpResourcesTool` returns "No resources found" either way. If the data tools are not available, call `mcp__plugin_mercadopago_mcp__authenticate` to get the authorization URL and show it directly in chat — do not send the user to `/mcp` manually. **There is no offline mode** — the official checklist must come from the MCP.
2. Hand control to the `mp-review` skill, passing `$ARGUMENTS` (the scope) through.
## Scopes
`$ARGUMENTS` (optional) narrows the review:
- `security` — credentials, HTTPS, HMAC, server-side verification, idempotency.
- `webhooks` — defers to `mp-webhooks` for receiver correctness.
- `checkout` / `qr` / `subscriptions` / `marketplace` — product-scoped check.
- `quality` — only the official `quality_checklist` items.
- `full` (default) — everything: security floor + product checks + quality checklist.Shipped by 1 plugin
Installing any of these installs this command.
What this can do
Capabilities declared in this component's own frontmatter — not inferred.
Run shell commands
Declares Bash
~34 tokens of context used while enabled, before you invoke anything
All declared tools (5)
AskUserQuestionBashGlobGrepReadReviews
Log in to leave a review.
No reviews yet — be the first.
Explore related
Other things in this space — across every part of the ecosystem, not just commands.
Commandssimilar to this one
All commands →modernize-harden
Security vulnerability scan with a reviewable remediation patch — OWASP, CWE, CVE, secrets, injection
32.8K stars
modernize-status
Where am I in the modernization workflow — artifact inventory, staleness, secrets hygiene, next step
32.8K stars
audit-ssl
Audit ZIA SSL inspection rules -- list rules by action (INSPECT, DO_NOT_INSPECT, DO_NOT_DECRYPT, BLOCK), identify bypasses, and assess risk.
Plugins
All plugins →claude-security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, tha
32.9K stars
claude-md-management
Tools to maintain and improve CLAUDE.md files - audit quality, capture session learnings, and keep project memory current.
32.9K stars
math-olympiad
Solve competition math (IMO, Putnam, USAMO) with adversarial verification that catches what self-verification misses. Fresh-context verifiers attack proofs with specific failure patterns. Calibrated abstention over bluffing.
32.9K stars
MCP Servers
All mcp servers →Subagents
All subagents →ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
235.3K stars
claude-security
The dedicated Claude Security orchestrator. Hand it an unattended job — "fully scan this repository and patch what you find; I understand it will use a lot of tokens" — and it runs the whole thing itself: capturing the revision, driving the multi-agent scan through the claude-security:scan workflow,
32.8K stars
scan-verifier
Restricted read-only verifier dispatched by the Claude Security scan workflow to vote on one candidate finding; not for direct invocation.
32.8K stars
Skills
All skills →ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
235.3K stars
claude-md-improver
Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report, then makes targeted updates. Also use when the user mentions "CLAUDE.md maintena
32.8K stars
Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
26.9K stars