Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Security scanning for AI agent skills, exposed as MCP tools. Scan skills from ClawHub, GitHub, skills.sh, or raw URLs — directly from your AI agent.
164 tests · 6 analyzers · ASST taxonomy · Hosted trust_check commerce
Add to your agent's MCP configuration:
Published package: agentverus-scanner-mcp
If you want the hosted commercial tools (list_offers, trust_check), set:
AGENTVERUS_API_KEY for authenticated calls to https://agentverus.ai/api/v1/trust/checkAGENTVERUS_BASE_URL only if you need a non-production AgentVerus base URL{
"mcpServers": {
"agentverus": {
"command": "npx",
"args": ["-y", "agentverus-scanner-mcp"]
}
}
}{
"mcp": {
"agentverus": {
"command": "npx",
"args": ["-y", "agentverus-scanner-mcp"]
}
}
}check_skillCheck a skill by name or identifier. Resolves ClawHub slugs, GitHub repos, and skills.sh paths automatically.
check_skill({ source: "web-search" })
check_skill({ source: "vercel-labs/agent-skills/react-best-practices" })list_offersFetch the machine-readable AgentVerus offer catalog.
list_offers({})trust_checkCall the hosted AgentVerus Trust Check SKU. Requires AGENTVERUS_API_KEY.
trust_check({ url: "https://raw.githubusercontent.com/owner/repo/main/SKILL.md" })
trust_check({ skillId: "11111111-1111-1111-1111-111111111111" })scan_urlScan a skill from any URL — GitHub, ClawHub, skills.sh, or raw SKILL.md.
scan_url({ url: "https://github.com/owner/repo" })scan_skillScan skill content directly (pass the raw SKILL.md text).
scan_skill({ content: "---\nname: my-skill\n---\n# My Skill\n..." })explain_findingGet a detailed explanation of any ASST security category.
explain_finding({ id: "ASST-06" })agentverus://taxonomy — Full ASST taxonomy (11 categories)agentverus://offers — Hosted offer catalog and billing metadataagentverus://about — Scanner info and capabilitiesThe scanner checks for 11 categories of agent-specific security risks:
| ID | Category | Examples | |
|---|---|---|---|
| ASST-01 | Instruction Injection | Hidden directives in HTML comments | |
| ASST-02 | Data Exfiltration | Unauthorized outbound data transfers | |
| ASST-03 | Privilege Escalation | Excessive permission requests | |
| ASST-04 | Dependency Hijacking | Compromised URLs, `curl\ | sh` patterns |
| ASST-05 | Credential Harvesting | Reading env vars + network sends | |
| ASST-06 | Prompt Injection Relay | Unvalidated external content processing | |
| ASST-07 | Unverified Package | Unknown/unscanned dependencies | |
| ASST-08 | Obfuscation | Encoded payloads, minified scripts | |
| ASST-09 | Missing Safety Boundaries | No scope limits or error handling | |
| ASST-10 | Persistence Abuse | Exploitable state storage | |
| ASST-11 | Trigger Manipulation | Overly broad activation patterns |
| Badge | Score | Meaning |
|---|---|---|
| 🟢 Certified | 95-100 | No significant security concerns |
| 🟡 Conditional | 85-94 | Minor concerns, review recommended |
| 🟠 Suspicious | 60-84 | Significant concerns, manual review required |
| 🔴 Rejected | 0-59 | Critical security issues found |
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.