Advertise
MCP.so
Sign In

Skillaudit MCP Server

@megamind-0x

RepositoryHomepage

Basic information

Category

Developer Tools

Transports

stdio

Author

megamind-0x

Submitted by

megamind-0x

About Skillaudit MCP Server

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

#security#scanning#ai-agents#mcp#vulnerability-detection

Skillaudit MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "skillaudit": {
      "command": "npx",
      "args": [
        "skillaudit"
      ]
    }
  }
}

Skillaudit MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Skillaudit?

Skillaudit is a security layer for AI agent skills that scans, gates, and enforces policy before an agent installs anything. It covers MCP and A2A protocols with 43 detection rules and 401 patterns, and has zero dependencies.

How to use Skillaudit?

Use the CLI via npx skillaudit (requires Node.js 18+) or call the HTTP API. For a quick gate check, run npx skillaudit gate <url> or curl to the /gate endpoint. Full scans, bulk checks, policy evaluation, and MCP server mode are also supported.

Key features of Skillaudit

  • 43 detection rules across 16 security categories.
  • Pre-install gate check returning allow/deny decisions.
  • Bulk evaluation of multiple skills in one call.
  • Custom policy enforcement with risk thresholds.
  • MCP server mode for native tool integration.
  • Zero-dependency CLI, runs via npx.

Use cases of Skillaudit

  • Preventing credential theft from AI agent skills.
  • Scanning MCP manifests for schema poisoning.
  • Enforcing security policies in CI/CD pipelines.
  • Auditing npm/PyPI packages for malicious code.
  • Gate-checking skills before installation in agent workflows.

Frequently asked questions

1

What runtime does Skillaudit require?

The CLI requires Node.js 18+; the hosted API needs no local runtime.

2

What is the rate limit for the API?

30 requests per minute per IP; you can bypass it with an API key.

3

How does Skillaudit avoid false positives?

Smart context suppression automatically filters out documentation examples and placeholder tokens.

4

Can I self-host Skillaudit?

Yes, clone the repository, run `npm install && npm start`, and it listens on `http://localhost:3847`.

5

What transports does Skillaudit support?

It supports CLI (stdio), HTTP API, and MCP protocol (stdio) via `--mcp` flag.

Comments

More Developer Tools MCP servers

Eased

easedui

Eased is a library of motion-first React components for shadcn, installed with the shadcn CLI.

Meticulous

Meticulous

9apes

9apes

The 9apes MCP server lets an AI assistant read the GitHub Actions data 9apes already collects for your organization: runs, jobs, steps, and their durations. Ask it why a build got slower, which jobs take the longest, or

SSH MCP Server

hypnosis

SSH MCP server for AI agents: remote commands, file transfer, log search and server audits through OpenSSH.

1

Pugi

Pugi Inc.

Pugi is an AI product team in your chat. Describe a business in a few sentences and Pugi plans, designs, builds and checks a real website, shows a live preview, and puts it live on its own address. Ask for changes in pla

Advertise