step-security

Dev Machine Guard

Name: Dev Machine Guard
Author: step-security

AI community

SOURCE https://github.com/step-security/dev-machine-guard

Description

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

StepSecurity Dev Machine Guard

StepSecurity Dev Machine Guard demo

Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages — in seconds.

Why Dev Machine Guard?

Developer machines are the new attack surface. They hold high-value assets — GitHub tokens, cloud credentials, SSH keys — and routinely execute untrusted code through dependencies and AI-powered tools. Recent supply chain attacks have shown that malicious VS Code extensions can steal credentials, rogue MCP servers can access your codebase, and compromised npm packages can exfiltrate secrets.

Developer machine attack surface — malicious extensions, rogue MCP servers, unvetted AI agents, compromised packages