広告掲載
MCP.so
ログイン

Skillaudit MCP Server

@megamind-0x

リポジトリホームページ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

megamind-0x

投稿者

megamind-0x

Skillaudit MCP Server について

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

#security#scanning#ai-agents#mcp#vulnerability-detection

Skillaudit MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "skillaudit": {
      "command": "npx",
      "args": [
        "skillaudit"
      ]
    }
  }
}

Skillaudit MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Skillaudit?

Skillaudit is a security layer for AI agent skills that scans, gates, and enforces policy before an agent installs anything. It covers MCP and A2A protocols with 43 detection rules and 401 patterns, and has zero dependencies.

How to use Skillaudit?

Use the CLI via npx skillaudit (requires Node.js 18+) or call the HTTP API. For a quick gate check, run npx skillaudit gate <url> or curl to the /gate endpoint. Full scans, bulk checks, policy evaluation, and MCP server mode are also supported.

Key features of Skillaudit

  • 43 detection rules across 16 security categories.
  • Pre-install gate check returning allow/deny decisions.
  • Bulk evaluation of multiple skills in one call.
  • Custom policy enforcement with risk thresholds.
  • MCP server mode for native tool integration.
  • Zero-dependency CLI, runs via npx.

Use cases of Skillaudit

  • Preventing credential theft from AI agent skills.
  • Scanning MCP manifests for schema poisoning.
  • Enforcing security policies in CI/CD pipelines.
  • Auditing npm/PyPI packages for malicious code.
  • Gate-checking skills before installation in agent workflows.

よくある質問

1

What runtime does Skillaudit require?

The CLI requires Node.js 18+; the hosted API needs no local runtime.

2

What is the rate limit for the API?

30 requests per minute per IP; you can bypass it with an API key.

3

How does Skillaudit avoid false positives?

Smart context suppression automatically filters out documentation examples and placeholder tokens.

4

Can I self-host Skillaudit?

Yes, clone the repository, run `npm install && npm start`, and it listens on `http://localhost:3847`.

5

What transports does Skillaudit support?

It supports CLI (stdio), HTTP API, and MCP protocol (stdio) via `--mcp` flag.

コメント

「開発者ツール」の他のコンテンツ

ArtiBot Cloud MCP - Zhijiangyun 智匠云

bofob

ArtiBot Cloud MCP (Zhijiangyun 智匠云) — cloud MCP server for robot manipulation data & GPU workloads. 15 tools: robot fleet management, data collection & video recording, post-processing pipelines, and benchmark evaluation

1

Perfex CRM

themesic

Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.

1
M

MeroFoundry

MERO Consulting Inc

MeroFoundry is a remote MCP server available at https://platform.merofoundry.com/mcp.

Casefile

azimov777

One case file per task — shared by every session, agent and person that touches it. Self-hosted MCP server and live board. MIT.

3

Raccha AI

Shree Mandadi

MCP-first toolbox for agents: namespaced key-value storage, a FIFO queue, auth, and a handful of stateless utility tools (JWT decode, hashing, cert inspection, CIDR math). Free while in early access. This repository is a

広告掲載