Search

[glama](https://glama.ai/mcp/servers/@duriantaco/mcp-skylos) 🐍 🏠 🍎 🪟 🐧 - Dead code detection, security scanning, and code quality analysis for Python, TypeScript, and Go. 98% recall with fewer false positives than Vulture. Includes AI-powered remediation.

Observe AI agent runs and control consequential actions. Signed policies, exact-action approvals, AuthZEN API vetoes and evidence. MCP gateway today; connected-channel supervision and scoped reactions toward 1.0. Experimental alpha.

Local-first firewall and black-box run reporter for MCP tool calls: block poisoned tools, detect drift, rate-limit agents, and audit runs.

Find poisoned MCP tools, hidden prompts in CLAUDE.md/.cursorrules, leaked tokens and risky agent permissions. Agent skill + zero-dep scanner + GitHub Action.

Semgrep-style static analysis for AI automation workflows: find prompt-injection paths, overpowered tools, and write-capable agent jobs before they run.

Optional execution runtime for the SecHelix AppSec Agent Skill: deterministic reasoner DAG, budget governor, coverage ledger and replayable evidence.

Privacy-first security scanner for MCP server configurations

Security testing toolkit for MCP servers and AI agents.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Find what a repository's CI is missing, and which security checks cannot fail the build.

Static and semantic security scanner for Model Context Protocol servers

MCP Security Audit

Security framework for AI-generated code. Prompts, checklists, and tools for Cursor, Claude, and Copilot.

MCP server security scanner — the open-source engine behind the Canopii Trust Index

Know what you're installing before you npx it. A security scanner for Model Context Protocol (MCP) servers and client configs.

Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.