{"name":"io.github.RudrenduPaul/skillguard","slug":"rudrendupaul-skillguard","title":null,"description":"Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.","url":"https://mcp.market/server/rudrendupaul-skillguard","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":24,"stars":1,"forks":0,"downloads_week":15,"last_push_at":"2026-09-10T07:40:01.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/RudrenduPaul/skillguard","website":null,"version":"0.2.5","remotes":[],"packages":[{"registryType":"pypi","identifier":"skillguard-cli","version":"0.2.5","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"value":"skillguard-cli","type":"named","name":"--from"}],"packageArguments":[{"value":"skillguard","type":"positional","valueHint":"script_name"},{"value":"mcp","type":"positional","valueHint":"subcommand"}]}],"tools":[{"name":"run","description":"","write_action":true,"price_micros":0,"input_schema":null},{"name":"scan_skill","description":"","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":85,"grade":"A","scanned_at":"2026-09-23T21:38:38.513Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-23T21:38:38.469Z","components":{"code":{"score":20,"max":25,"notes":["39 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 14 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"skillguard_cli-0.2.5/src/skillguard/rulepacks/data/sg02-remote-code-exec/pack.json: … content: curl/wget piped into a shell, eval() of downloaded data, and shelling out w…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"skillguard-cli","version":"0.2.5","found":true,"weeklyDownloads":15,"license":"Apache-2.0","dependencyCount":5,"publishedAt":"2026-08-11T01:09:25.575709Z","repositoryUrl":"https://github.com/RudrenduPaul/skillguard"}],"repo":{"found":true,"owner":"RudrenduPaul","repo":"skillguard","archived":false,"pushedAt":"2026-09-10T07:40:01Z","stars":1,"forks":0,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/38769913?v=4","ownerCreatedAt":"2018-04-26T21:59:35Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/38769913?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":15,"license":"Apache-2.0","lastPushAt":"2026-09-10T07:40:01.000Z","score":24}}}},"grade_history":[],"reviews":[]}