SkillAudit
megamind-0x/skillauditSecurity scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.
Score: 100/100
Handshake verified by our own probe.
Tools · 4
Scan a skill/MCP server by URL for security issues. Returns risk level, findings, and verdict.
Scan a GitHub repository for skill files and security issues.
Pre-install gate check. Returns allow/warn/deny decision for a skill URL.
Check the reputation of a domain based on aggregated scan history.
How to use
Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://skillaudit.vercel.app/mcp
Cursor or Cline: add to your MCP config:
{
"mcpServers": {
"skillaudit": {
"url": "https://skillaudit.vercel.app/mcp",
"transport": "http"
}
}
}