Skill

scan-mcp-server-or-skill-before-installing

Scan an MCP server, agent skill or plugin package for prompt injection, credential exfiltration, hidden instructions and dangerous code before installing or running it. Use when asked to install an MCP server, add a skill, run `npx`/`pip install` for an agent tool, or evaluate a package from npm, PyPI, GitHub or ClawHub. Triggers on 'install this MCP', 'add this skill', 'is this package safe'.

Bundled with Tanod. Its trust score, security findings and other files are on the plugin page.

npx [email protected] add tanod-labs/tanod-mcp