MCP server

Skill Sec

io.github.sudo-ai-git/mcp-skill-sec

Checked 25 Oct 2026, 21:11 UTC · Still published on its registry; checked against OSV.dev; never run by us

Audit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

25 Oct 2026, 21:11 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add mcp-skill-sec -- uvx mcp-skill-sec@1.0.0

Claude Desktop

{"mcpServers":{"mcp-skill-sec":{"command":"uvx","args":["mcp-skill-sec@1.0.0"]}}}

Codex (config.toml)

[mcp_servers.mcp-skill-sec]
command = "uvx"
args = ["mcp-skill-sec@1.0.0"]

Gemini CLI

{"mcpServers":{"mcp-skill-sec":{"command":"uvx","args":["mcp-skill-sec@1.0.0"]}}}

Cursor

{"mcpServers":{"mcp-skill-sec":{"command":"uvx","args":["mcp-skill-sec@1.0.0"]}}}

VS Code

{"servers":{"mcp-skill-sec":{"type":"stdio","command":"uvx","args":["mcp-skill-sec@1.0.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting
• Calling other AI models

Related MCP servers

• Skill Audit
  MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
• Nullcone Threat Intelligence
  Real-time threat intel for AI agents: 890K+ IOCs incl. prompt-injection & AI-skill threats
• Dominionobservatory Observatory
  Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.
• TunnelMind Data API
  Tracker / Sigil / Cross-lens — every TunnelMind Data API operation as one MCP surface.
• Moltline Agent Governance
  Audit MCP configs and skill files for over-broad scope and injection risk. 6 of 8 free.
• Commit — Supply Chain Risk Scoring
  Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
• DataNexus MCP
  Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
• AgentAegis
  Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.sudo-ai-git/mcp-skill-sec.svg)](https://aptlynx.net/servers/io.github.sudo-ai-git/mcp-skill-sec)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents