Agent Skill & Config Security Audit MCP Server

by tylerscomic-lab Your server? Claim it

answering

Agent Skill & Config Security Audit is answering right now. Last checked 11 min ago. Last commit 2 Oct 2026.

Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.

Uptime history 11 days of history

11 days agonow

100.0%

Uptime 24h

91 of 91 checks

—

Tools

hidden behind auth

525 ms

Response time

average over 24h

Stars

last commit 2 Oct 2026

What the code does

We read the source, 6 d ago · rules ccca72095570

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Sends data to a third-party sink server.js:47

const EXFIL_HOST_RE = /(webhook\.site|requestbin|pipedream\.net|ngrok(-free)?\.(io|app|dev)|pastebin\.com|transfer\.sh|discord(app)?\.com\/api\/webhooks|hooks\.slack\.com|burpcollaborator|interact\.sh|oast\.(fun|live|site|pro|me)|canarytokens|trycloudflare\.com|\.workers\.dev|api…

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 11 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add agent-skill-audit-mcp --transport http https://agent-skill-audit-mcp.mcpize.run/mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "agent-skill-audit-mcp": {
      "url": "https://agent-skill-audit-mcp.mcpize.run/mcp"
    }
  }
}

~/.codex/config.toml

[mcp_servers.agent-skill-audit-mcp]
url = "https://agent-skill-audit-mcp.mcpize.run/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "agent-skill-audit-mcp": {
      "url": "https://agent-skill-audit-mcp.mcpize.run/mcp"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "agent-skill-audit-mcp": {
      "url": "https://agent-skill-audit-mcp.mcpize.run/mcp"
    }
  }
}

This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.

Endpoints

URL	Transport	State	Latency	Checked
https://agent-skill-audit-mcp.mcpize.run/mcp	streamable-http	sign-in	608 ms	11 min ago

Alternatives to Agent Skill & Config Security Audit

same job, measured the same way

Hares — MCP security scanner

by alialrikabi313

Multi-layer security scanner for MCP servers and agent skills (injection, exfiltration)

24 installs/wk local only

TrustScan

by entradox

Security scanner for MCP servers and skills: Unicode injection, patterns, secrets.

4 tools answering

Shadowgate MCP

by josephibra

Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.

answering

Agent-Shield

by startekenterprises-ai

Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.

answering

Agent Security Scanner

by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

147 installs/wk local only

Valca

by pranlabs

Scans code, IaC and AI-agent config for security problems. Read-only — nothing can be edited.

189 installs/wk local only

AI Code Scanner

by 4hmetuyar

Scans code for insecure LLM/AI integration: exposed keys, unsafe output, prompt injection

43 installs/wk local only

Shellward

by jnmetacode

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

295 installs/wk local only

Agent Skill & Config Security Audit — questions

Answers built from our own checks of this server.

Why is there no tool list for Agent Skill & Config Security Audit?

The server answered our handshake with an authorization challenge, so it is running — but it will not describe its tools to an anonymous client. To see them you need to connect with your own credentials. We record it as alive, not as broken: 100.0% of checks in the last 24 hours got a reply.

Is Agent Skill & Config Security Audit working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 91 of 91 checks got a reply (100.0%), average response time 525 ms. The bar chart above shows every period we have measured.

How do I connect Agent Skill & Config Security Audit?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address. You sign in through your browser once and the client keeps the session: no key to copy, and it refuses anonymous clients.

How do you sign in to Agent Skill & Config Security Audit?

No API key is involved. Agent Skill & Config Security Audit answers our knock with an OAuth challenge, so you authorise it once in your browser and the client keeps the session. That is also why we see no tool list: it will not describe itself to an anonymous client, and that is the server working as intended, not a fault.

How fast is Agent Skill & Config Security Audit?

It answers our handshake in 525 ms on average, which is faster than 23% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.

Is Agent Skill & Config Security Audit open source?

Yes — it is published under the MIT licence, written in JavaScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.