广告合作
MCP.so
登录

Skillaudit MCP Server

@megamind-0x

代码仓库主页

基本信息

分类

开发工具

传输方式

stdio

作者

megamind-0x

提交者

megamind-0x

关于 Skillaudit MCP Server

🛡️ Security scanner for AI agent skills — detect credential stealers, exfiltration, and malicious patterns before install

#security#scanning#ai-agents#mcp#vulnerability-detection

Skillaudit MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "skillaudit": {
      "command": "npx",
      "args": [
        "skillaudit"
      ]
    }
  }
}

Skillaudit MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Skillaudit?

Skillaudit is a security layer for AI agent skills that scans, gates, and enforces policy before an agent installs anything. It covers MCP and A2A protocols with 43 detection rules and 401 patterns, and has zero dependencies.

How to use Skillaudit?

Use the CLI via npx skillaudit (requires Node.js 18+) or call the HTTP API. For a quick gate check, run npx skillaudit gate <url> or curl to the /gate endpoint. Full scans, bulk checks, policy evaluation, and MCP server mode are also supported.

Key features of Skillaudit

  • 43 detection rules across 16 security categories.
  • Pre-install gate check returning allow/deny decisions.
  • Bulk evaluation of multiple skills in one call.
  • Custom policy enforcement with risk thresholds.
  • MCP server mode for native tool integration.
  • Zero-dependency CLI, runs via npx.

Use cases of Skillaudit

  • Preventing credential theft from AI agent skills.
  • Scanning MCP manifests for schema poisoning.
  • Enforcing security policies in CI/CD pipelines.
  • Auditing npm/PyPI packages for malicious code.
  • Gate-checking skills before installation in agent workflows.

常见问题

1

What runtime does Skillaudit require?

The CLI requires Node.js 18+; the hosted API needs no local runtime.

2

What is the rate limit for the API?

30 requests per minute per IP; you can bypass it with an API key.

3

How does Skillaudit avoid false positives?

Smart context suppression automatically filters out documentation examples and placeholder tokens.

4

Can I self-host Skillaudit?

Yes, clone the repository, run `npm install && npm start`, and it listens on `http://localhost:3847`.

5

What transports does Skillaudit support?

It supports CLI (stdio), HTTP API, and MCP protocol (stdio) via `--mcp` flag.

评论

开发工具 分类下的更多 MCP 服务器

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

12
M

MeroFoundry

MERO Consulting Inc

MeroFoundry is a remote MCP server available at https://platform.merofoundry.com/mcp.

Innovalyxx Sovereign Edge

edge.innovalyxx.com

Verified cyber-physical AI tools. 25 MCP tools, x402-payable on Base.

Termany

thinkany-ai

Agent-Native Terminal

174

Heard

Heard

Let your cloud agents talk to you. Grok Bot, Meta Muse, ChatGPT, Claude, Devin and others report progress to Heard, which reads it out loud on your Mac, and they pick up the replies you send back.

广告合作