Safe Agent and MCP Review Checklist

Review an AI agent, MCP server, plugin, or skill before installation. Covers provenance, permissions, secrets, paid actions, runtime safety, data lifecycle, and rollback. This is not a certification or security guarantee.