Install Skillssafe in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add skillssafe -- <command to start the server>Frequently asked questions
What does the Skillssafe MCP server do?
Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.
Is the Skillssafe MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Skillssafe run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Skillssafe to Claude Code?
Follow the install steps in the project's README at https://github.com/GUCCI-atlasv/skillssafe-mcp, then register it with "claude mcp add".
More security & identity MCP servers
View allSmallprint Action
gostanos/smallprint-action/mcp
Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.
Sieve
gautam-u/sieve-mcp
Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command execution.
Vaulted
vaulted-fyi/vaulted-mcp-server
Share end-to-end encrypted, self-destructing secrets from an agent, reading them from env vars or files so they stay out of LLM context.
Shieldapi
alberthild/shieldapi-mcp
Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain scanning.
Web Exposure
Perufitlife/web-exposure-mcp
Read-only check of a live URL for publicly exposed secret files: .git, .env, JS source maps, backup/SQL dumps, directory listings and dotfiles.
Shield
rob925/mcp-shield
Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt injection.