広告掲載
MCP.so
ログイン

Skillaudit MCP Server

@megamind-0x

リポジトリホームページ

基本情報

カテゴリ

開発者ツール

トランスポート

stdio

作者

megamind-0x

投稿者

megamind-0x

Skillaudit MCP Server について

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

#security#scanning#ai-agents#mcp#vulnerability-detection

Skillaudit MCP Server の設定

以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。

{
  "mcpServers": {
    "skillaudit": {
      "command": "npx",
      "args": [
        "skillaudit"
      ]
    }
  }
}

Skillaudit MCP Server のツール

ツール一覧はまだありません

この掲載には表示できるツール一覧がまだありません。サーバーにツールがないという意味ではありません。対応機能はプロジェクトのドキュメントをご確認ください。

上のボタンで一時的なサンドボックスでこのサーバーを実行し、ツール一覧を取得できます。

概要

What is Skillaudit?

Skillaudit is a security layer for AI agent skills that scans, gates, and enforces policy before an agent installs anything. It covers MCP and A2A protocols with 43 detection rules and 401 patterns, and has zero dependencies.

How to use Skillaudit?

Use the CLI via npx skillaudit (requires Node.js 18+) or call the HTTP API. For a quick gate check, run npx skillaudit gate <url> or curl to the /gate endpoint. Full scans, bulk checks, policy evaluation, and MCP server mode are also supported.

Key features of Skillaudit

  • 43 detection rules across 16 security categories.
  • Pre-install gate check returning allow/deny decisions.
  • Bulk evaluation of multiple skills in one call.
  • Custom policy enforcement with risk thresholds.
  • MCP server mode for native tool integration.
  • Zero-dependency CLI, runs via npx.

Use cases of Skillaudit

  • Preventing credential theft from AI agent skills.
  • Scanning MCP manifests for schema poisoning.
  • Enforcing security policies in CI/CD pipelines.
  • Auditing npm/PyPI packages for malicious code.
  • Gate-checking skills before installation in agent workflows.

よくある質問

1

What runtime does Skillaudit require?

The CLI requires Node.js 18+; the hosted API needs no local runtime.

2

What is the rate limit for the API?

30 requests per minute per IP; you can bypass it with an API key.

3

How does Skillaudit avoid false positives?

Smart context suppression automatically filters out documentation examples and placeholder tokens.

4

Can I self-host Skillaudit?

Yes, clone the repository, run `npm install && npm start`, and it listens on `http://localhost:3847`.

5

What transports does Skillaudit support?

It supports CLI (stdio), HTTP API, and MCP protocol (stdio) via `--mcp` flag.

コメント

「開発者ツール」の他のコンテンツ

BetterBugs

BetterBugs

The BetterBugs MCP (Model Context Protocol) enables you to load BetterBugs bug reports (via report links) directly to your preferred AI Agents and developer environments with MCP Client capabilities (such as Cursor, VS C

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

12

dot.tools

Bitgate

28 developer utilities for LLMs: format, convert, encode, decode, generate and validate — JSON, YAML, XML, SQL, JWT, certificates, CIDR subnets, cron, hashes, UUIDs, passwords, QR codes and more. Stateless, fast, free.

Yocoolab

Yocoolab

MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools

1

CircleCI MCP Server

CircleCI

Manage CI/CD pipelines, debug failed builds, and optimize test suites directly from your AI agents - no terminal required. The CircleCI MCP Server is a remote server hosted by CircleCI that connects AI tools and agents

広告掲載