Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.
Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.
Skills and plugins are code plus instructions that you hand to an agent holding your shell, your files, and your credentials. People install them from marketplace links and pasted GitHub URLs on vibes. That is a supply chain, and it has all the classic attack shapes: hooks that fire automatically on session start, install scripts piped from the network, credential reads paired with outbound calls, and prompt injection hiding in the instruction text itself.
skanna reads the whole package (SKILL.md files, scripts, hooks, manifests) and returns SAFE / CAUTION / DANGEROUS with file:line findings and a go / no-go recommendation. It never executes anything from the target.
Or manually: copy skills/skanna/ into ~/.claude/skills/ and restart Claude Code.
No API key, no dependencies, no per-scan cost. The scanner is the model you are already running, pointed at the right things with the right suspicions.
One rule file per danger family, in skills/skanna/references/rules/:
Rule family Looks for ------ autorun-hooks SessionStart / PreToolUse / Stop hooks that run code before you ever review it piped-network-install curl \ bash, iwr \ iex, postinstall scripts fetching remote code credential-access reads of .env, SSH keys, keychains, browser cookies, token-paste prompts exfiltration outbound calls carrying file contents, env vars, or conversation text obfuscation base64 + eval, minified blobs, instructions you cannot read prompt-injection instruction text that hijacks the agent against
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/proluct--skanna.html)
MCP server and Claude skills for PPC landing pages, A/B experiments, and first-party conversion tracking. Build Google Ads and Meta pages, run cross-domain experiments, and pull CRO reports via the UX
12122J/mcpvetMCP security scanner — vet a Model Context Protocol server before you add it to Claude Code, Cursor, or Windsurf. Grades it A–F, catching credential theft, tool-poisoning, and install-script payloads
chris-asmussen/wardenOne MCP server that fronts many MCP servers + Skills behind a small tool set and routes to the best one, keeping an agent's context tiny. Migrate your Claude Code MCPs/skills behind it.
KernelLord/pickysteveSkill router and context picker for Claude Code, Cursor, and Aider. Auto-picks the right skill for every prompt, with prompt-injection filtering for MCP.
oyekamal/claude-code-flow-visualizer🔍 Visualize any Claude Code agent harness — CLAUDE.md, subagents, skills, commands, hooks & MCP servers — as an interactive flow graph. Import from GitHub, ZIP, or local folder. 100% client-side.
luckeyfaraday/frontier-orchestratorMulti-agent orchestration for Claude Code: MCP server + skill that keeps Claude as lead engineer while delegating backend work to OpenAI Codex and frontend/design work to Kimi
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.