{"name":"io.github.sudo-ai-git/mcp-skill-sec","slug":"sudo-ai-git-mcp-skill-sec","title":null,"description":"Audit agent skills/prompts against 8 supply-chain attack patterns. Deterministic, no-LLM scanner.","url":"https://mcp.market/server/sudo-ai-git-mcp-skill-sec","rating":null,"grade":"A","score":88,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":17,"stars":0,"forks":0,"downloads_week":24,"last_push_at":"2026-08-30T22:15:49.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sudo-ai-git/mcp-skill-sec","website":null,"version":"1.0.0","remotes":[],"packages":[{"registryType":"pypi","identifier":"mcp-skill-sec","version":"1.0.0","transport":{"type":"stdio"}}],"tools":[{"name":"audit_directory","description":"Audit every matching file in a directory (default *.md) against the 8 patterns. Returns per-file verdicts and a summary. Use to scan a downloaded skills collection before installing anything.","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_skill_file","description":"Audit a file on disk (SKILL.md / AGENTS.md / CLAUDE.md / system prompt) against the 8 malicious-skill patterns. Returns verdict + line-numbered evidence.","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_text","description":"Audit arbitrary text (a SKILL.md, AGENTS.md, system prompt, or code snippet) against the 8 malicious-skill patterns. Returns verdict + evidence per finding. Use before installing or running anything you didn't write.","write_action":false,"price_micros":0,"input_schema":null},{"name":"rule_list","description":"Return the full catalog of the 8 audit rules and their risk pattern signals, used by the audit tools.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":88,"grade":"A","scanned_at":"2026-10-30T18:17:29.194Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-30T18:17:29.145Z","components":{"code":{"score":25,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 61 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"pypi","identifier":"mcp-skill-sec","version":"1.0.0","found":true,"weeklyDownloads":24,"license":"MIT","dependencyCount":1,"publishedAt":"2026-08-27T22:25:36.303183Z","repositoryUrl":"https://github.com/sudo-ai-git/mcp-skill-sec"}],"repo":{"found":true,"owner":"sudo-ai-git","repo":"mcp-skill-sec","archived":false,"pushedAt":"2026-08-30T22:15:49Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/217306538?v=4","ownerCreatedAt":"2025-06-21T06:27:45Z"},"icon":{"url":"https://avatars.githubusercontent.com/u/217306538?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":0,"forks":0,"downloadsWeek":24,"license":"MIT","lastPushAt":"2026-08-30T22:15:49.000Z","score":17}}}},"grade_history":[],"reviews":[]}