Synk Skill Security Scanner
Description
- Auto-discover MCP configurations, agent tools, skills - Scanning of Claude, Cursor, Windsurf, Gemini CLI, and other agents. - Detects [15+ distinct security risks](docs/issue-codes.md) across MCP servers and agent skills:
Installation
claude install-skill https://github.com/snyk/agent-scan README
Snyk Agent Scan
Discover and scan agent components on your machine for prompt injections
and vulnerabilities (including agents, MCP servers, skills).
**NEW** Read our [technical report on the emerging threats of the agent skill eco-system](.github/reports/skills-report.pdf) published together with Agent Scan 0.4, which adds support for scanning agent skills.
Agent Scan helps you keep an inventory of all your installed agent components (harnesses, MCP servers, skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language.
Highlights
- undefined
Quick Start
To get started:
- undefined
Scanning
To run a full scan of your machine (auto-discovers agents, MCP servers, skills), run:
...
Related Skills
Defense in Depth
Implement multi-layered testing and security best practices.
Security community SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security community Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security community Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head report in `docs/maintainers/security-findings-triage-2026-03-29-refresh.md`. - Added a match
Security community Google Workspace Model Armor
Filter user-generated content for safety
Security community Google Workspace Alert Center
Manage security alerts
Security community Related Agents
Accessibility Audit
| You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive tec... | - | [wshobson/agents](https://github.com/wshobson/agents) |
wcag-audit-patterns
| Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation... | - | [wshobson/agents](https://github.com/wshobson/agents) |
Deps Audit
| You are a dependency security expert specializing in vulnerability scanning, license compliance, and... | - | [wshobson/agents](https://github.com/wshobson/agents) |