ClawSec MCP Server

@clawsec

Basic information

About ClawSec MCP Server

Security audit platform for AI agent skills (Claude Code, MCP servers). Provides 5-tier analysis: static analysis, pattern matching, LLM semantic review, Firecracker sandbox execution, and LLM final review. Trust Score system for risk assessment.

ClawSec MCP Server config

No standard config provided

This server doesn't expose a parseable MCP config block in its README. See the repository for install instructions.

ClawSec MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is ClawSec?

ClawSec is a security audit platform designed for AI agent skills, including Claude Code and MCP servers. It provides a five‑tier analysis pipeline with a Trust Score system for risk assessment. The platform has audited over 33,000 skills, identifying 20+ malicious and 160+ suspicious items. It targets threats such as prompt injection, data exfiltration, crypto wallet theft, and AI alignment attacks. ClawSec is free to use.

How to use ClawSec?

—

Key features of ClawSec

Five‑tier analysis: static analysis, pattern matching, LLM semantic review, Firecracker sandbox execution, and LLM final review
Trust Score system for overall risk assessment
Detection of prompt injection, data exfiltration, crypto wallet theft, and AI alignment attacks
Audited over 33,000 AI agent skills
Identified 20+ malicious and 160+ suspicious skills

Use cases of ClawSec

Audit Claude Code skills for security vulnerabilities before deployment
Evaluate MCP servers for malicious or suspicious behavior
Assess the risk of AI agent tools using a structured, multi‑stage analysis pipeline

Frequently asked questions

How many skills has ClawSec audited so far?

ClawSec has audited more than 33,000 AI agent skills, finding over 20 malicious and 160 suspicious items.

What types of threats does ClawSec detect?

ClawSec detects prompt injection, data exfiltration, crypto wallet theft, and AI alignment attacks.

Is ClawSec free to use?

Yes, the platform is free to use.

What does the Trust Score represent?

The Trust Score is a system for overall risk assessment of a skill, based on the results of the five‑tier analysis.

What analysis methods are used in ClawSec’s pipeline?

The pipeline includes static analysis, pattern matching, LLM semantic review, Firecracker sandbox execution, and a final LLM review.

Comments

More AI & Agents MCP servers

HeyLead: LinkedIn Outreach & Lead Generation MCP Server

D4umak

HeyLead: AI agent for LinkedIn outreach. Finds the right people, writes in your voice, follows up and handles replies, from Claude Code, Cursor, any MCP client or a web dashboard.

AskOne: Live Q&A and Polls

phuryn

Run free live audience Q&A and polls from your agent: start an AskOne room, add and launch a poll, approve or hide questions and mark them answered, close the room, then read the questions as a FAQ draft and get the resu

Gemina

Gemina Tech Ltd.

Extract, search and tag any document — invoices, receipts, contracts, forms, or your own templates. 13 tools, one sign-in (OAuth 2.1) or API key, free FileTag tier, data residency in the EU, US, Israel or Asia.

Ranla

Kurtis Tryber

AI growth agent for software businesses. Ranla ships pages that rank on Google, gets your product named in AI answers, replies on Reddit and sends lifecycle email. Ask how growth is going, have Ranla draft the work and a

OpenZiti / LLM-Gateway

openziti

NetFoundry LLM Gateway is an OpenAI-compatible API proxy that routes requests across multiple LLM providers using zero-trust networking. Zero trust LLM gateway. OpenAI-compatible proxy with semantic routing and load bala