skillguard
Static security scanner for Claude Code skills, plugins, and MCP servers — vet a dependency for malware (secret/env exfiltration, install-time hooks, prompt injection, committed binaries) **before** you install it. Static-only: it clones and reads files, never executes the scanned code. `npx -y github:epistemedeus/skillguard mcp`
Topics: Security
Connect
See the repository for installation instructions: https://github.com/epistemedeus/skillguard
Related servers
ida-pro-mcp
MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and…
GhidraMCP
A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling…
jadx-ai-mcp
JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live…
beelzebub
Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious…
SafeDep Vet MCP
Protect your AI agents and IDEs from malicious open-source packages.
skylos
Dead code, security, secrets detection and code quality for Python, TypeScript, Go.
Listed in punkpeye/awesome-mcp-servers (MIT)