CatCatUncle

Toolward — Security skill for Claude Code

Security community

Security auditor for AI agent extensions — MCP servers, skills, plugins, connectors.

How to install Toolward

This entry records only its repository, not the path inside it, so there is no exact command to give. Open CatCatUncle/toolward and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Toolward does

Security auditor for AI agent extensions — MCP servers, skills, plugins, connectors. Finds prompt injection, tool poisoning, rug pulls, leaked keys and permission bypass. Static analysis only: never runs, installs or phones home for what it audits.

Alternatives in Security

Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
Claude Leaked Files — Mirrored snapshot of Claude Code's source (exposed 2026-03-31) preserved for educational purposes, defensive s 256 ★

README

Toolward

Your agent will run whatever you connect to it. Toolward reads it first.
A security auditor for the MCP servers, skills, plugins and connectors your agent loads.
Static analysis only — it never runs, installs or phones home for anything it audits.

面向 Agent 扩展的安全审查工具 · 中文文档

⚡ Quick start · Supported hosts · 37 rules · Threat model · CI · Limits · Licence