Local + RemoteFree

Skill Audit MCP server

eltociear/skill-audit-mcp

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

5 GitHub stars2 forks
Source code

Install Skill Audit in Claude Code

Remote URL

Claude Code
claude mcp add --transport http skill-audit https://eltociear-skill-audit.hf.space/mcp
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "skill-audit": {
      "url": "https://eltociear-skill-audit.hf.space/mcp"
    }
  }
}

Docker

Claude Code
claude mcp add skill-audit -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "skill-audit": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
      ]
    }
  }
}

Frequently asked questions

What does the Skill Audit MCP server do?

MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.

Is the Skill Audit MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Skill Audit run locally or remotely?

Local + Remote. Can run locally or be used as a hosted remote server.

How do I add Skill Audit to Claude Code?

Run: claude mcp add --transport http skill-audit https://eltociear-skill-audit.hf.space/mcp

More security & identity MCP servers

View all

SkillsSafe Security Scanner

0149

GUCCI-atlasv/Skillssafe.com

AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.

Local + RemoteFree

Scannd

162

zachforrest/webscannerio

Trigger security scans and read reports/vulnerabilities via the hosted Scannd API. Free: 2 scans/mo.

LocalAccount needed

Tripwire

1118

bonesdefi/Tripwire

Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.

LocalFree

Painprep

142

Goingparabolic/painprep-mcp-server

Interventional pain medicine MCP: Medicare checklists, CPT/ICD-10, ASRA, prior-auth & appeals

LocalFree

Bounty Operator

5

bountyoperator/bounty-operator

Argues against a security finding or a draft bug bounty report before you submit it.

RemoteAccount needed

Moltbridge

55.9k

SageMindAI/moltbridge

Agent network intelligence for AI agents. Trust scoring, broker discovery, and Ed25519 identity.

LocalFree