@aidongise-cell
基本情報
Security scanner for AI Agent skills, plugins, and MCP servers. 39+ detection rules with AST taint tracking, A-F grading, and post-uninstall residue cleanup.
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"prism-scanner": {
"command": "npx",
"args": [
"prism-scanner",
"scan",
"https://github.com/user/skill-repo"
]
}
}
}ツール一覧はまだありません
この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。
上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。
Prism Scanner is a security scanner for AI Agent skills, plugins, and MCP servers. It analyzes code for malicious behavior before installation and checks for leftover threats after uninstallation, covering pre‑install, runtime, and post‑uninstall phases across platforms including ClawHub, MCP, npm, and pip. It is designed for developers and security professionals who need code‑level transparency and open‑source tooling.
Install via pip install prism-scanner, Homebrew, npx prism-scanner, or Docker. Use the CLI commands prism scan <target> to scan a local directory or GitHub repo, and prism clean --scan, prism clean --plan, or prism clean --apply for system residue management. It can also run as an MCP server exposing four tools (prism_scan, prism_grade, prism_clean_scan, prism_clean_plan) for integration with AI assistants.
Prism provides deep code analysis with rule‑by‑rule transparency instead of a black‑box reputation score. It covers pre‑install and post‑uninstall phases, works across multiple platforms, and is fully open source (Apache 2.0).
Python 3.10+ is required. The scanner has zero dependencies on the target code — it performs pure static analysis and never executes the scanned skill or plugin. It can run locally, offline.
Yes. Detection rules are defined in YAML files under the `rules/` directory (e.g., `malicious_signatures.yaml`, `permissions.yaml`, `suspicious_domains.yaml`). Adding entries extends detection without modifying Python code.
It uses a three‑tier workflow: `prism clean --scan` lists findings, `prism clean --plan` generates a non‑destructive cleanup plan, and `prism clean --apply` executes cleanup with automatic backups (supports `--rollback`).
Rich terminal output by default, plus JSON, standalone HTML, and SARIF format for GitHub Code Scanning integration. Use `--format` and `-o` flags to specify.
A curated list of references for MLOps
Health by Dr Brad works out a health plan from your own results: which screening is due at your age, and evidence-based suggestions, each with the reason and the published guideline or study behind it. Your record is one
Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov
B2B competitive intelligence, live sales battlecards, 5-axis ICP prospect fit scoring, and tech stack teardowns over MCP and REST with cited public-web evidence.
Painless E2E Automation for Mobile and Web
コメント