Security scanner for MCP servers and agent skills. Detects prompt injections, tool poisoning, and sensitive data risks across Claude, Cursor, Windsurf, and 10+ other agents.
- Access
- CLI
- Auth
- API Key
- Skills
- 3
Skills
Scan MCP Servers
Auto-discover and scan installed MCP server configurations for prompt injections, tool poisoning, and tool shadowing attacks.
Scan Agent Skills
Inventory and analyze agent skills across Claude Code, Codex, and Cursor for malware payloads hidden in natural language.
Security Report
Generate detailed security reports with severity ratings across 15+ distinct risk categories for all installed agent components.
Related Agents
NVIDIA SkillSpector
by NVIDIA
Scan agent skills, plugins, and MCP servers before installing them — detects prompt injection, data exfiltration…
HOL Guard
by Hashgraph Online
Blocks risky AI coding agent actions at runtime on your machine — shell commands, secret access, MCP servers, plugins…
Semgrep
by Semgrep
Scans source code with AI-assisted SAST, SCA, and secrets detection, finding 8x more true positives with 50% less noise…
promptfoo
by promptfoo
Tests and red-teams LLM apps, agents and RAG pipelines from declarative config, scanning for prompt injection…