MCP Security Audit (npm) — Security skill for Claude Code
Audits npm dependencies in MCP servers for known vulnerabilities via registry.
How to install MCP Security Audit (npm)
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open qianniuspace/mcp-security-audit and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What MCP Security Audit (npm) does
[](https://smithery.ai/server/@qianniuspace/mcp-security-audit) [](https://www.npmjs.com/package/mcp-security-audit) [](https://opensource.org/licenses/MIT)
Alternatives in Security
- Google MCP Security Servers — Security Operations and Threat Intelligence MCP servers 453 ★
- Fix Secdeps — Audit and fix Dependabot security vulnerabilities across the monorepo 390 ★
- Agentseal — Security toolkit for AI agents 344 ★
README
Security Audit Tool
[](https://smithery.ai/server/@qianniuspace/mcp-security-audit) [](https://www.npmjs.com/package/mcp-security-audit) [](https://opensource.org/licenses/MIT)
A powerful MCP (Model Context Protocol) Server that audits npm package dependencies for security vulnerabilities. Built with remote npm registry integration for real-time security checks.
Features
- 🔍 Real-time security vulnerability scanning
- 🚀 Remote npm registry integration
- 📊 Detailed vulnerability reports with severity levels
- 🛡️ Support for multiple severity levels (critical, high, moderate, low)
- 📦 Compatible with npm/pnpm/yarn package managers
- 🔄 Automatic fix recommendations
- 📋 CVSS scoring and CVE references
Installing via Smithery
To install Security Audit Tool for Claude Desktop automatically via [Smithery](https://smithery.ai/server/@qianniuspace/mcp-security-audit):
npx -y @smithery/cli install @qianniuspace/mcp-security-audit --client claude
MCP Integration
Option 1: Using NPX (Recommended)
- Add MCP configuration to Cline /Cursor:
{
"mcpServers": {
"mcp-security-audit": {
"command": "npx",
"args": ["-y", "mcp-security-audit"]
}
}
}
Option 2: Download Source Code and Configure Manually
- Clone the repository:
git clone https://github.com/qianniuspace/mcp-security-audit.git
cd mcp-security-audit
- Install dependencies and build:
npm install
npm run build
- Add MCP configuration to Cline /Cursor :
{
"mcpServers": {
"mcp-security-audit": {
"command": "npx",
"args": ["-y", "/path/to/mcp-security-audit/build/index.js"]
}
}
}
Configuration Screenshots
Cursor Configuration
Cline Configuration
API Response Format
The tool provides detailed vulnerability information including severity levels, fix recommendations, CVSS scores, and CVE references.
Response Examples
...
Related Skills
Audit MCP Fleet
Healthcheck + drift detect + rotation-reminder across all MCP servers in ~/.claude/mcp-registry.json
Cchub
Desktop hub for managing Claude Code MCP servers, health checks, configuration profiles, skills, plugins, hook
Claude Code Security Setup
A secure Claude Code setup from Trail of Bits that provides opinionated defaults, documentation, and workflows
Claude Setup Audit
A Claude Code plugin that audits your whole setup — settings, permissions, hooks, MCP servers, skills, CLAUDE.
Ccc Audit
Run npm audit + bundle size check + lint scan. Returns vulnerabilities, oversized bundles, and lint errors.
Review Dependency Risk
Audit dependency manifests for supply-chain risk: unmaintained or typosquatted packages, license conflicts, un
Related Agents
Kenaz
Audits the security of Claude Code plugins, MCP servers, and AI agents before installation. Analyzes executabl
Dependency Auditor
Audit dependencies for vulnerabilities, outdated versions, and deprecations. C#/.NET first (dotnet list packag
Ecosystem Maintenance
Periodic health sweep across all Zanix repos for outdated/deprecated third-party dependencies (Deno std, npm p