Mcp-scan (Invariant Labs) — Security skill for Claude Code
MCP security scanner with proxy mode for real-time scanning without infrastructure changes.
How to install Mcp-scan (Invariant Labs)
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open snyk/agent-scan and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Mcp-scan (Invariant Labs) does
MCP security scanner with proxy mode for real-time scanning without infrastructure changes.
One of 2 entries listed from snyk/agent-scan. The repository README
describes the whole collection, not this skill — read it on GitHub.
Alternatives in Security
- Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
- Node9 Proxy — The Execution Security Layer for the Agentic Era 209 ★
- Audit Infra — Infrastructure-first security audit — secrets, supply chain, CI/CD, LLM/skill security, OWASP, STRIDE 98 ★
Related Skills
Deep
Execute the current task using DEEP mode for architecture, security, data, infrastructure, public contracts, o
Latency Arbitrage
Detect and exploit price latency gaps between real-time crypto prices and Polymarket prediction market prices.
Resilience Audit
Reliability / failure-mode audit — why distributed and async systems fall over: single points of failure, miss
Audit Upgrade
Audit this Spree app for upgrade readiness — breaking changes vs your code, manifest plan, SDK drift — without
Cloud Config Audit
Assess infrastructure-as-code security with offline scanning and evidence-based finding review.
Seraph
Multi-agent cloud governance system that reviews AWS infrastructure changes for security, cost, and compliance
Related Agents
Specflow Review Scanner
Category-scanning specialist for flow.review. Use to scan one review category (BP/RF/HD/MF/OC/OE/OD/SC/UI) and
Repotify Scanner Guardian
Use for any change under src/scan/ (line rules, shell reading, file rules, typosquatting) and to triage a repo
Broadcasting Agent
Creates WebSocket broadcasting infrastructure (NestJS backend) and real-time consumption on the frontend (Next
