Synk Skill Security Scanner banner
snyk snyk

Synk Skill Security Scanner

Security community intermediate

Description

- Auto-discover MCP configurations, agent tools, skills - Scanning of Claude, Cursor, Windsurf, Gemini CLI, and other agents. - Detects [15+ distinct security risks](docs/issue-codes.md) across MCP servers and agent skills:

Installation

Terminal
claude install-skill https://github.com/snyk/agent-scan

README

Snyk Agent Scan

Discover and scan agent components on your machine for prompt injections

and vulnerabilities (including agents, MCP servers, skills).

**NEW** Read our [technical report on the emerging threats of the agent skill eco-system](.github/reports/skills-report.pdf) published together with Agent Scan 0.4, which adds support for scanning agent skills.

Agent Scan helps you keep an inventory of all your installed agent components (harnesses, MCP servers, skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language.

Highlights

    undefined

Quick Start

To get started:

    undefined

Scanning

To run a full scan of your machine (auto-discovers agents, MCP servers, skills), run:

...