{"uid":"cap_ytcjpaIA2W0Wmy_YPs_0m","slug":"skill-scan-mcp-agent-skill-security-consensus-scanner-079af2aa","name":"Skill Scan – MCP / Agent Skill Security Consensus Scanner","description":"Skill Scan by Agentropolis: static Consensus Scan of an MCP server or agent skill before you install it. Pass a GitHub repo, npm:/pypi: package or pasted code + tools/list/SKILL.md. Flags tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks; 2 rule families + 2 LLM reviewers vote; cross-checks Agentropolis seller trust data. Returns allow/review/block with evidence. Read-only, never executes the code. Advisory.","url":"https://seenly-skill-scan.vercel.app/api/scan?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"code":{"type":"string","description":"Single pasted file (alternative to files)."},"repo":{"type":"string","maxLength":500,"description":"Public source to scan: https://github.com/owner/repo (optionally /tree/<ref>/<path>), a /blob/ or raw.githubusercontent.com file URL, npm:<package>[@version] or pypi:<package>[==version] (sdist). Fetched read-only; never executed."},"files":{"type":"array","items":{"type":"object","required":["content"],"properties":{"path":{"type":"string","maxLength":300},"content":{"type":"string"}}},"maxItems":60,"description":"Pasted source files (total <= 200,000 chars)."},"context":{"type":"string","maxLength":500,"description":"Optional: what you plan to use the tool for (helps judge capability vs purpose)."},"manifest":{"oneOf":[{"type":"object"},{"type":"array"},{"type":"string"}],"description":"Optional: the server's tools/list result, {tools:[...]}, server.json, or SKILL.md text."},"requestKey":{"type":"string","maxLength":128}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.3","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.3/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.3","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_PP7Rp9Qcr7I80qH9LHzdG","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.3","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Statically scans an MCP server or agent skill (GitHub repo, npm/pypi package, or pasted code) for security risks such as tool poisoning, credential exfiltration, and remote code execution, then returns an allow/review/block verdict with evidence.","exampleAgentPrompt":"Before I install this MCP server, can you run a Skill Scan security audit on the GitHub repo at https://github.com/someowner/somerepo? I plan to use it for task scheduling in my agent pipeline — flag anything like tool poisoning, credential exfiltration, or hidden instructions.","exampleUseCases":[{"title":"Pre-install npm agent skill audit","prompt":"I found an npm package called 'mcp-calendar-tool' and want to add it to my agent. Can you run a Skill Scan on npm:mcp-calendar-tool before I install it? I'll be using it for calendar management — let me know if it's safe or if there are any red flags like hidden instructions or install hooks."},{"title":"Marketplace skill trust check","prompt":"I'm evaluating a skill from Agentropolis marketplace and the seller looks new. Can you scan this GitHub repo https://github.com/newvendor/agent-skill and tell me whether to allow, review, or block it? I'm planning to use it to handle customer data lookups."},{"title":"Pasted code security review","prompt":"A contractor sent me this Python file they want to add as an agent tool — can you paste it into Skill Scan and check it for anything dangerous like credential theft, obfuscation, or remote code execution before we deploy it?"}],"resultDescription":"Returns a top-level verdict of 'allow', 'review', or 'block', accompanied by structured evidence: matched rule families, findings from two LLM reviewer votes, specific flags (tool poisoning, hidden instructions, credential/env exfiltration, remote code exec, obfuscation, install hooks), and cross-referenced Agentropolis seller trust data. The scan is advisory and read-only — the code is never executed.","failureModes":["Private or inaccessible GitHub repo returns a fetch error","Package name not found on npm/pypi returns a not-found error","Pasted code exceeds 200,000 character limit","Manifest format unrecognized, skipping that signal","LLM reviewer timeout leads to partial consensus result","Ambiguous or insufficient context may reduce verdict confidence"],"whenToPreferThis":"Use this endpoint when you need a pre-install security gate for MCP servers or agent skills sourced from GitHub, npm, pypi, or pasted code. It is specifically designed for the agentic supply chain threat model (tool poisoning, hidden instructions, credential exfiltration) and combines deterministic rule families with LLM consensus voting — making it more thorough than a simple static linter. Prefer it over generic code scanners when the subject is an AI agent tool or MCP server and you want an allow/review/block verdict with seller trust context.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-29T13:08:24.818Z","isFirstParty":false,"canonicalSlug":"skill-scan-mcp-agent-skill-security-consensus-scanner-079af2aa"}