VQV Signal
Agent-scan is a static security scanner designed for the AI agent ecosystem, including MCP servers, Agent Skills, and tool code. It detects prompt injection, hidden instructions, data exfiltration, and supply-chain risks, operating fully offline with zero dependencies.
Agent-scan is a static security scanner designed for the AI agent ecosystem, including MCP servers, Agent Skills, and tool code. It detects prompt injection, hidden instructions, data exfiltration, and supply-chain risks, operating fully offline with zero dependencies.
AI-assisted summary based on the listed source.
🛡️ npm audit for the AI agent ecosystem. Static security scanner for MCP servers, Agent Skills, AGENTS.md and tool code — detects prompt injection, hidden instructions, data exfiltration and supply-chain risks. Zero dependencies, fully offline, SARIF output. Stars: 0. Updated repository signal.
As AI agents become more prevalent, ensuring their security against vulnerabilities like prompt injection and data leaks is critical. Agent-scan provides a specialized tool to identify these risks early in development and deployment.
Security-conscious readers may want to review the source and watch for practical exposure or mitigation details.
VQV organizes public signals from inspectable sources. It does not independently verify the underlying report.
Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.
VQV surfaced this signal because it is recent, relevant to AI Security, connected to GitHub.
No login, cookies, social SDKs, or automatic posting.