SkillsSafe Security Scanner

com.skillssafePublished by skillssafe.comOfficial publisherv1.1.0Updated Oct 24, 2026

AI skill security scanner. Detects prompt injection, credential theft, ClawHavoc. Free, no signup.

VerifiedSSEWeb executableDeveloper Tools Security & Monitoring

Server details

Identifier: com.skillssafe/scanner
Transport: SSE
Runtime: Web executable
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified that this server's namespace belongs to skillssafe.com, which also runs its endpoint. That identifies the publisher; it does not make the server's tools safe.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/com.skillssafe%2Fscanner.svg)](https://sourceweft.com/mcp/com.skillssafe%2Fscanner?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Free security scanner that lets an assistant scan AI skill files, MCP configs and prompts for prompt injection, credential theft and other threats before…

What you can do: Scan a skill by URL or by pasted content and get a risk score, severity rating and shareable report link
Retrieve a full scan report for a previous scan
Check for credential theft, data exfiltration, prompt injection, shell injection, zero-width characters, scope creep, memory poisoning and privacy risk
Detect hidden zero-width Unicode characters in text
When to use it: Useful when you are about to install or trust a third-party skill, MCP config or system prompt and want a quick automated safety check before running it, including inside an agent workflow or CI pipeline.
Requirements: A remote endpoint or the npm package skillssafe-mcp over stdio. No API key or signup is required; the REST API is limited to 60 requests per hour.

Before you install

Content you submit for scanning, including skill files and prompts, is sent to the SkillsSafe service for analysis. Scan results are advisory and may produce false positives, so review findings before relying on them.

Installation

In SourceWeft

Open SkillsSafe Security Scanner in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Web executable via SSE. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.skillssafe%2Fscanner/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "skillssafe-security-scanner": {
      "type": "sse",
      "url": "https://mcp.skillssafe.com/sse"
    }
  }
}

README

SkillsSafe — AI Skill Security Scanner

[smithery badge]

Free, no-signup security scanner for AI agent skills. Scan any SKILL.md, MCP config, or system_prompt for threats before installing.

🌐 skillssafe.com

What Is SkillsSafe?

As AI agents become more powerful, malicious skills can steal credentials, exfiltrate data, or hijack your agent's behavior. SkillsSafe scans skill files before you install them — the same way an antivirus scans software before you run it.

Supported platforms: OpenClaw · Claude Code · Cursor · Codex · any MCP-compatible agent

Features

🔍 Security Scanner

Paste content, enter a URL, or upload a file to scan for:

Threat	Description
Credential Theft	Attempts to access API keys, tokens, or passwords
Data Exfiltration	Skills that send your data to external servers
Prompt Injection	Hidden instructions that hijack agent behavior
Shell Injection	Reverse shell or arbitrary command execution
Zero-Width Characters	Invisible Unicode characters hiding malicious instructions
Scope Creep	Skills requesting permissions beyond their stated purpose
Memory Poisoning	Attempts to corrupt agent memory or context
Privacy Risk	Unnecessary access to personal or sensitive data

Each scan returns a risk score, severity rating (SAFE / CAUTION / DANGER / CRITICAL), and a shareable report link.

👁️ Zero-Width Character Detector

Visualize invisible Unicode characters (U+200B, U+200C, U+200D, U+FEFF, etc.) hidden inside text. Attackers embed these to create prompts that look safe to humans but carry hidden instructions for AI agents.

🔌 MCP Server Integration

Native Model Context Protocol support — let your agent automatically check skill safety before installation. No API key required.

Available MCP tools:

scan_url — Scan a skill by URL
scan_content — Scan skill content directly
get_report — Retrieve a full scan report

📡 REST API

Works with any agent, script, or CI/CD pipeline.

bash

# Scan by URLcurl -X POST https://skillssafe.com/api/v1/scan/url \  -H "Content-Type: application/json" \  -d '{"url": "https://clawhub.ai/skills/example"}'
# Scan by contentcurl -X POST https://skillssafe.com/api/v1/scan/content \  -H "Content-Type: application/json" \  -d '{"content": "...skill content..."}'

# Scan by URLcurl -X POST https://skillssafe.com/api/v1/scan/url \  -H "Content-Type: application/json" \  -d '{"url": "https://clawhub.ai/skills/example"}'
# Scan by contentcurl -X POST https://skillssafe.com/api/v1/scan/content \  -H "Content-Type: application/json" \  -d '{"content": "...skill content..."}'

Full OpenAPI spec: https://skillssafe.com/api/v1/openapi.json

Pages

Route	Description
`/`	Main security scanner
`/zero-width-detector`	Hidden Unicode character detector
`/api-docs`	Interactive API documentation
`/integrate`	Integration guide for MCP & REST API
`/feedback`	Bug reports and feature requests

Getting Started (Local Development)

Open http://localhost:3000 in your browser.

Environment Variables

Tech Stack

Framework: Next.js (App Router)
Deployment: Cloudflare Workers via @opennextjs/cloudflare
Database: Cloudflare D1 (SQLite)
i18n: next-intl (English · 中文 · 日本語)

Pricing

100% Free · No Signup · No Rate Limits for Humans

API rate limit: 60 requests/hour (no API key required).

Feedback & Support

Found a bug or false positive? Send feedback or email [email protected].

SkillsSafe is an independent security tool, not affiliated with Anthropic, OpenClaw, or Cisco.

Source: README.md at commit dc10aec

Tools

SourceWeft has not read this server's tools yet.

Version history

v1.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declaredRequired10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts