Static security scanner for MCP servers, agent skills & plugins: 17 attack patterns / 60 regex signatures, calibrated to a 1% false-positive rate over 196 public MCP servers. In the official MCP Registry: io.github.eltociear/skill-audit-mcp. Also a pay-per-call x402 API.
Setup
Choose your client, copy the config, then fill in any required environment variables.
Local
claude mcp add skill-audit -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0~/.codex/config.toml
[mcp_servers.skill-audit]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"]
# codex mcp add skill-audit -- docker run -i --rm ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0~/.cursor/mcp.json
{
"mcpServers": {
"skill-audit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
]
}
}
}.vscode/mcp.json
{
"servers": {
"skill-audit": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"skill-audit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"skill-audit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"skill-audit": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/eltociear/skill-audit-mcp:mcp-1.2.0"
]
}
}
}Remote
claude mcp add --transport http skill-audit https://eltociear-skill-audit.hf.space/mcp~/.codex/config.toml
[mcp_servers.skill-audit]
url = "https://eltociear-skill-audit.hf.space/mcp"
# codex mcp add skill-audit --url https://eltociear-skill-audit.hf.space/mcp~/.cursor/mcp.json
{
"mcpServers": {
"skill-audit": {
"url": "https://eltociear-skill-audit.hf.space/mcp"
}
}
}.vscode/mcp.json
{
"servers": {
"skill-audit": {
"type": "http",
"url": "https://eltociear-skill-audit.hf.space/mcp"
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"skill-audit": {
"httpUrl": "https://eltociear-skill-audit.hf.space/mcp"
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"skill-audit": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://eltociear-skill-audit.hf.space/mcp"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"skill-audit": {
"url": "https://eltociear-skill-audit.hf.space/mcp"
}
}
}