Scan installed agent setup
scan_installedScans installed AI agent skills, plugins, hooks, MCP servers, and editor/CLI configs for security findings, using read-only, offline checks with severity filtering.
Instructions
Scans the agent setup already on this machine, like toolmoat scan with no paths: Claude Code skills, plugins, commands, agents, hooks, settings and user config, Claude Desktop, Cursor, VS Code, Windsurf, Codex and Gemini CLI configs, plus the project files of the server working directory. Read-only and offline.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| deep | No | Also walk node_modules, virtualenvs and caches. | |
| max_findings | No | Largest number of findings to return, most severe first. | |
| min_severity | No | Leave out findings below this severity. | low |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | Yes | ||
| counts | Yes | ||
| targets | Yes | ||
| version | Yes | ||
| findings | Yes | ||
| filesScanned | Yes | ||
| skippedFiles | Yes | ||
| highestSeverity | Yes | ||
| omittedFindings | Yes |