@adityasugandhi
基本情報
The only MCP server that gates skill installation behind a full security scan. 60+ threat patterns, 13 MCP tools, and support for 7 clients including Claude Code, Cursor, Windsurf, and GitHub Copilot. Features AI-powered search, cloud sync, and startup verification with SHA-256 c
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"skillsmp": {
"command": "npx",
"args": [
"-y",
"@stranzwersweb2/skillsync-mcp"
]
}
}
}Search SkillsMP marketplace for skills by keyword. Returns names, descriptions, authors, and GitHub links. WARNING: Results contain untrusted third-party content.
AI-powered semantic search on SkillsMP. Uses Cloudflare AI for relevance matching. WARNING: Results contain untrusted third-party content.
Scan a skill's GitHub source for security threats: prompt injection, reverse shells, credential theft, supply chain attacks, crypto mining, and 60+ other patterns. Only accepts github.com URLs.
Search SkillsMP and auto-scan top results for security threats. Combines keyword search with vulnerability scanning for each result.
Security-scan a skill from GitHub, then install it. Blocks on critical threats. Use scope="project" to install to .claude/skills/ in cwd, or "global" (default) for ~/.claude/skills/.
Remove an installed skill by name. Use scope="project" for .claude/skills/ in cwd, or "global" (default) for ~/.claude/skills/.
List all installed skills with security status. Use scope="all" for cross-scope view, "project" for .claude/skills/, or "global" (default) for ~/.claude/skills/.
Deep security audit of a specific installed skill. Use scope="project" for .claude/skills/, or "global" (default) for ~/.claude/skills/.
Manage sync subscriptions and settings. Use scope="project" for project-level config, or "global" (default).
Run a sync cycle: poll subscriptions, diff against installed skills, install/update/remove. Use scope="project" for project-level sync, or "global" (default).
Show sync engine status: managed vs manual skills, subscriptions, last sync time, next scheduled sync. Use scope="all" for cross-scope view.
AI-powered skill recommendations based on what you already have installed. Use scope to specify which installed skills to base suggestions on.
Side-by-side comparison of two skills including security scan results. Accepts GitHub URLs or installed skill names. Use scope to specify which installed skills to check.
SkillSync MCP is a security-first skill management server for AI coding assistants. It gates every skill installation behind a comprehensive threat analysis covering 60+ patterns across 15 attack categories.
Run npx -y @stranzwersweb2/skillsync-mcp to start the server. Configure it as an MCP server in your client’s settings file (e.g., ~/.claude/settings.json for Claude Code) using the same npx command.
fs.watch and SHA-256 content hashingEvery installation is gated by a security scan covering prompt injection, reverse shells, credential theft, supply chain attacks, and 11 other categories. Critical threats are permanently blocked with no override possible.
It requires Node.js and npx. No other runtime dependencies are mentioned; it runs as an MCP server started via `npx -y @stranzwersweb2/skillsync-mcp`.
Skills are sourced from the SkillsMP marketplace. They can be installed, uninstalled, listed, and audited locally; cloud sync allows sharing across machines. File size limits (max 50 files, 512KB per file, 2MB total) and supply‑chain safety (`npm install --ignore-scripts`) are enforced.
Path traversal prevention, SSRF prevention (only `github.com` URLs), output sanitization (zero‑width Unicode, bidi overrides), a 15‑minute scan cache with 100‑entry LRU eviction, and `fs.watch` startup verification with debounced re‑scanning.
Claude Code, OpenClaw, Cursor, Windsurf, GitHub Copilot, Zed, and nanobot are explicitly listed as supported clients.
MCP server for AI Agents — exposes Yocoolab feedback threads and design selections as tools
Turn Perfex CRM into an AI-ready workspace. This MCP server exposes your full REST API to Claude, ChatGPT and any AI agent, so leads, invoices and tasks are one prompt away.
Interactive MCP App demo built on Metabind: personal-finance answers render as UI cards (net worth, spending, subscriptions) in Claude and ChatGPT, and natively in iOS/Android apps.
Agent-Native Terminal
Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci
コメント