agent-scan

Scan agent skills and MCP servers for security issues before adoption.

Why it is listed

Useful for screening downloaded extensions before they enter a coding workflow.

Set a Snyk API token, then run `uvx snyk-agent-scan@0.5.17`.

Other active tools sharing a workflow category and a supported agent.

Intercept risky file and Git commands before a coding agent executes them.

Scan agent skill packages for suspicious instructions and risky behavior before installation.

Inspect MCP server tools for suspicious descriptions and security findings.