MCP server directory

SkillAudit

Security scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.

SkillAudit scans MCP skills and agents for security threats like credential theft, data exfiltration, prompt injection, and code execution. It offers free basic scans and paid premium scans with advanced analysis.

Version:: hosted
Publisher:: megamind-0x
Company:: SkillAudit
Pricing:: Basic scans are free, with premium scans priced per scan or in batches.; Summary written by google/gemini-2.5-flash-lite from the server’s own site and README; facts above come from the registries.; Logo: https://skillaudit.vercel.app/og-image.svg

Install

Generated from the server’s transport data — never hand-written. Placeholders in angle brackets are yours to fill.

Run it with its own identity, a budget you set, and every call audited — no local config to keep in sync.

Add to a connect0 project

You will sign in first, then land back on this page.

What it can do

As declared by the publisher

Tools · 4

gate_check
Pre-install gate check. Returns allow/warn/deny decision for a skill URL.
reputation_check
Check the reputation of a domain based on aggregated scan history.
scan_github
Scan a GitHub repository for skill files and security issues.
scan_url
Scan a skill/MCP server by URL for security issues. Returns risk level, findings, and verdict.