Mcp Clamav — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Clamav (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Simple ClamAV MCP that allows scanning files for viruses using the ClamAV engine.
Cursor ClamAV Integration
This project requires ClamAV to be installed on your system. Here's how to install it:
sudo apt-get update
sudo apt-get install clamav clamav-daemonbrew install clamavTo run the MCP server:
uv run mcp run main.py -t sseThe server will start and listen for SSE connections on port 8000 by default.
To use this MCP with Cursor, add the following configuration to your Cursor settings:
{
"mcpServers": {
"ClamAV Server": {
"url": "http://[SERVER_IP]:8000/sse"
}
}
}This configuration tells Cursor to connect to the ClamAV MCP server.
The MCP provides a single endpoint:
base64_data: Base64 encoded string of the file to scanfilename: Name of the file to use in the scansuccess: Boolean indicating if the scan was successfulresult: Raw output from clamscan commanderror: Error message if the scan failed~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.