MCP.so
ログイン

Skillaudit

@megamind-0x

リポジトリホームページ

Skillaudit について

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

#security#scanning#ai-agents#mcp#vulnerability-detection

基本情報

カテゴリ

開発者ツール

ランタイム

node

トランスポート

stdio

公開者

megamind-0x

投稿者

megamind-0x

設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "skillaudit": {
      "command": "npx",
      "args": [
        "skillaudit"
      ]
    }
  }
}

ツール

ツールは検出されませんでした

ツールは README から自動的に抽出されます。メンテナーは ## Tools という見出しの下に記載することで、このタブに反映できます。

概要

What is Skillaudit?

Skillaudit is a security layer for AI agent skills that scans, gates, and enforces policy before an agent installs anything. It covers MCP and A2A protocols with 43 detection rules and 401 patterns, and has zero dependencies.

How to use Skillaudit?

Use the CLI via npx skillaudit (requires Node.js 18+) or call the HTTP API. For a quick gate check, run npx skillaudit gate <url> or curl to the /gate endpoint. Full scans, bulk checks, policy evaluation, and MCP server mode are also supported.

Key features of Skillaudit

  • 43 detection rules across 16 security categories.
  • Pre-install gate check returning allow/deny decisions.
  • Bulk evaluation of multiple skills in one call.
  • Custom policy enforcement with risk thresholds.
  • MCP server mode for native tool integration.
  • Zero-dependency CLI, runs via npx.

Use cases of Skillaudit

  • Preventing credential theft from AI agent skills.
  • Scanning MCP manifests for schema poisoning.
  • Enforcing security policies in CI/CD pipelines.
  • Auditing npm/PyPI packages for malicious code.
  • Gate-checking skills before installation in agent workflows.

FAQ from Skillaudit

What runtime does Skillaudit require?

The CLI requires Node.js 18+; the hosted API needs no local runtime.

What is the rate limit for the API?

30 requests per minute per IP; you can bypass it with an API key.

How does Skillaudit avoid false positives?

Smart context suppression automatically filters out documentation examples and placeholder tokens.

Can I self-host Skillaudit?

Yes, clone the repository, run npm install && npm start, and it listens on http://localhost:3847.

What transports does Skillaudit support?

It supports CLI (stdio), HTTP API, and MCP protocol (stdio) via --mcp flag.

コメント

「開発者ツール」の他のコンテンツ

test

harlanc

A simple,high performance and secure live media server in pure Rust (RTMP[cluster]/RTSP/WebRTC[whip/whep]/HTTP-FLV/HLS).🦀

2.3K

Serena

oraios

A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent

26.2K

nuxt-mcp / vite-plugin-mcp

antfu

MCP server helping models to understand your Vite/Nuxt app better.

910

MCP-Scan: An MCP Security Scanner

invariantlabs-ai

Security scanner for AI agents, MCP servers and agent skills.

2.8K

MCP Unity Editor (Game Engine)

CoderGamester

Model Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs

1.8K