SkillAudit
Security scanner for AI agent skills and MCP servers.
Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only
What it can do
- Scan Url: Scan a skill/MCP server by URL for security issues. Returns risk level, findings, and verdict.
- Scan Github: Scan a GitHub repository for skill files and security issues.
- Gate Check: Pre-install gate check. Returns allow/warn/deny decision for a skill URL.
What data it sees
Do you need an account
No: the server works without sign-in
Security scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.
Server tool list (4)
Raw names from tools/list. Only developers need these.
| scan_url | Scan a skill/MCP server by URL for security issues. Returns risk level, findings, and verdict. |
| scan_github | Scan a GitHub repository for skill files and security issues. |
| gate_check | Pre-install gate check. Returns allow/warn/deny decision for a skill URL. |
| reputation_check | Check the reputation of a domain based on aggregated scan history. |