Skip to main content
Glama
Sign In
agent-skill-audit-mcp

agent-skill-audit-mcp

by tylerscomic-lab
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Hybrid

Related Servers

Alternatives to agent-skill-audit-mcp

No user-submitted related servers found.

    Related Servers

    • SkillsGuard

      Teycir
      A
      license
      Not graded
      quality
      C
      maintenance
      Static security scanner for AI agent skill packages that detects malicious SKILL.md files and bundled scripts before they run.
      15
      MIT

    • SkillsSafe

      GUCCI-atlasv
      A
      license
      Not graded
      quality
      D
      maintenance
      Security scanner for AI agent skills, providing tools to scan skill files for threats such as credential theft and prompt injection.
      MIT

    • toolmoat

      Whitul
      A
      license
      A
      quality
      B
      maintenance
      Local-first security scanner for AI agent skills, plugins, hooks and MCP servers. Read-only, offline tools to scan a skill or MCP server before installing it, audit the installed setup and review proxy pins.
      5
      340 npm
      MIT

    • tar-engine

      qingxuantang
      A
      license
      Not graded
      quality
      C
      maintenance
      Audits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.
      2
      Apache 2.0

    • agent-sec-mcp

      sudo-ai-git
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables authorized security auditing of AI-agent supply chains and agent-facing surfaces: deterministic local skill-bundle audits against eight attack patterns, secrets scanning, and scope-gated read-only recon of agent endpoints and MCP surfaces.
      MIT

    • mcpscan

      fpavia111-creator
      A
      license
      Not graded
      quality
      B
      maintenance
      A read-only MCP server that lets an agent audit its own environment by discovering local MCP configurations and skill folders on Windows, macOS, and Linux and running offline static checks for prompt injection, hidden instructions, hardcoded secrets, dangerous commands, unpinned packages, and excessive filesystem or transport permissions. It exposes tools to scan everything discovered, list configurations, vet a single skill, or analyze supplied text, returning text, JSON, SARIF, or HTML findings with CI-friendly severity levels.
      8 npm
      MIT

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Resources