docs: point CLAUDE.md at common-thread-mcp

[Conrad Rockenhaus (skyphusion)]

Agent MCP door is the separate MIT package @skyphusion/common-thread-mcp (npm 0.1.1).

[github-actions]

Adversarial security audit

Generated 2026-08-07T08:47:06.018Z · ce3a6fa...868bd91

New MCP agent door documentation adds a remote API-consuming package invoked via npx without mentioning authentication, pinning, or supply-chain controls.

Severity	Location	Finding
high	CLAUDE.md:43	Unpinned npx MCP package: Documentation instructs npx -y @skyphusion/common-thread-mcp, which always pulls latest from npm. A compromised publish or namespace typo can execute arbitrary code inside crew tooling.
high	CLAUDE.md:47	MCP server defaults to hosted backend: MCP points at COMMON_THREAD_API_URL defaulting to the hosted backend. If run without BYOK configuration, the MCP tool likely sends investigation data and AI secrets to the SaaS operator.
medium	CLAUDE.md:43	MCP expands attack surface undocumented: Docs introduce a new stdio MCP server with website/API parity but do not mention authZ model, token scoping, or how it binds to existing investigation capability tokens.