SkillsSafe Security Scanner
Verified · yesterdayAI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.
Install
claude mcp add --transport sse scanner https://mcp.skillssafe.com/sse
Our take
SkillsSafe scans SKILL.md files, MCP configs, and prompts for credential theft, prompt injection, shell execution, zero-width text, and similar agent-supply-chain risks. The product itself is live and free, but the registry metadata is stale: the advertised mcp.skillssafe.com SSE endpoint does not resolve and the npm bridge still points there, while the working MCP endpoint is on skillssafe.com/api/mcp. Useful idea, but install from the live docs rather than trusting the registry transport.
Verification record
- yesterday
- 0
- 4 mo ago
- no
- MIT
- 155
- 1.1.0
- 2026-03-12