agent-scan
AI Skill Hub 强烈推荐：agent-scan 是一款优质的MCP工具。已获得 2.5k 颗 GitHub Star，AI 综合评分 8.6 分，在同类工具中表现稳健。如果你正在寻找可靠的MCP工具解决方案，这是一个值得深入了解的选择。
通过安装 agent-scan，你的 AI 助手将获得额外的工具调用能力，可以用自然语言直接操控该工具的功能，无需学习复杂的命令行语法。MCP 工具的核心价值在于"一次配置，永久增强"——配置完成后，每次与 AI 对话时都可以无缝调用这些工具。
在技术实现上，MCP 工具通过标准的 JSON-RPC 协议与 AI 客户端通信，工具的功能以"工具列表"的形式暴露给 AI 模型，AI 可以按需调用。agent-scan 提供了结构化的工具调用接口，使 AI 模型能够精确地理解和使用每个功能点，显著降低 AI 在工具使用上的错误率。
与传统的 API 集成相比，MCP 工具的优势在于无需编写代码——用户只需在配置文件中添加几行 JSON，即可让 AI 获得全新能力。AI Skill Hub 将 agent-scan 评为 AI 评分 8.6 分，属于同类工具中的优质选择。
agent-scan 是一款遵循 MCP（Model Context Protocol）标准协议的 AI 工具扩展。通过 MCP 协议，它可以让 Claude、Cursor 等主流 AI 客户端直接访问和操作外部工具、数据源和服务，实现 AI 能力的无缝扩展。无论是文件操作、数据库查询还是 API 调用，都可以通过自然语言在 AI 对话中直接触发，极大提升生产效率。
agent-scan 是一款遵循 MCP（Model Context Protocol）标准协议的 AI 工具扩展。通过 MCP 协议，它可以让 Claude、Cursor 等主流 AI 客户端直接访问和操作外部工具、数据源和服务，实现 AI 能力的无缝扩展。无论是文件操作、数据库查询还是 API 调用，都可以通过自然语言在 AI 对话中直接触发，极大提升生产效率。
- 通过标准 MCP 协议与 Claude、Cursor 等主流 AI 客户端深度集成
- 提供结构化工具调用接口，显著降低 AI 集成复杂度
- 支持 Claude Desktop 和 Claude Code 无缝接入，开箱即用
- 可与其他 MCP 工具组合叠加，构建完整 AI 工作站
- 轻量无侵入设计，不影响现有系统架构
- 在 Claude Desktop 对话中直接调用本地工具，实现 AI 与系统的深度联动
- 通过自然语言驱动复杂的多步骤自动化任务，代替繁琐手动操作
- 将多个 MCP 工具组合使用，构建个人专属 AI 工作站
# 方式一：通过 Claude Code CLI 一键安装
claude skill install https://github.com/snyk/agent-scan
# 方式二：手动配置 claude_desktop_config.json
{
"mcpServers": {
"agent-scan": {
"command": "npx",
"args": ["-y", "agent-scan"]
}
}
}
# 配置文件位置
# macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
# Windows: %APPDATA%/Claude/claude_desktop_config.json
- 确认已安装 Node.js（v18 或以上版本）
- 打开 Claude Desktop 或 Claude Code 的 MCP 配置文件
- 按「交给 Agent 安装 → Claude Desktop」标签中的 JSON 配置填入 mcpServers 字段
- 保存配置文件并重启 Claude 客户端
- 重启后，在对话中即可使用本工具
# 安装后在 Claude 对话中直接使用 # 示例： 用户: 请帮我用 agent-scan 执行以下任务... Claude: [自动调用 agent-scan MCP 工具处理请求] # 查看可用工具列表 # 在 Claude 中输入："列出所有可用的 MCP 工具"
// claude_desktop_config.json 配置示例
{
"mcpServers": {
"agent-scan": {
"command": "npx",
"args": ["-y", "agent-scan"],
"env": {
// "API_KEY": "your-api-key-here"
}
}
}
}
// 保存后重启 Claude Desktop 生效
简介
<p align="center"> <h1 align="center"> Snyk Agent Scan </h1> </p>
<p align="center"> Discover and scan agent components on your machine for prompt injections<br/> and vulnerabilities (including agents, MCP servers, skills). </p>
NEW Read our technical report on the emerging threats of the agent skill eco-system published together with Agent Scan 0.4, which adds support for scanning agent skills.
<p align="center"> <a href="https://pypi.python.org/pypi/snyk-agent-scan"><img src="https://img.shields.io/pypi/v/snyk-agent-scan.svg" alt="snyk-agent-scan"/></a> <a href="https://pypi.python.org/pypi/snyk-agent-scan"><img src="https://img.shields.io/pypi/l/snyk-agent-scan.svg" alt="snyk-agent-scan license"/></a> <a href="https://pypi.python.org/pypi/snyk-agent-scan"><img src="https://img.shields.io/pypi/pyversions/snyk-agent-scan.svg" alt="snyk-agent-scan python version requirements"/></a> </p>
<br>
Agent Scan helps you keep an inventory of all your installed agent components (harnesses, MCP servers, and skills) and scans them for common threats like prompt injections, sensitive data handling, or malware payloads hidden in natural language. Ignore analysis on skills by using --no-skills.
Highlights
- Auto-discover MCP configurations, agent tools, skills
- Scanning of Claude, Cursor, Windsurf, Gemini CLI, Amp, Amazon Q, and other agents.
- Detects 15+ distinct security risks across MCP servers and agent skills:
- MCP: Prompt Injection, Tool Poisoning, Tool Shadowing, Toxic Flows
- Skills: Prompt Injection, Malware Payloads, Untrusted Content, Credential Handling, Hardcoded Secrets
Supported agents and capabilities
Agent Scan auto-discovers agents and their capabilities (MCP servers or skills) when their install paths exist. The table reflects well-known agent definitions.
- ✓: at least one path is defined for that capability.
- ✗: the agent is listed for that OS but has no paths for that capability.
- —: that agent is not included for that OS.
- Skills Skills can be ignored by using
--no-skills
| Agent | macOS MCP | macOS Skills | Linux MCP | Linux Skills | Windows MCP | Windows Skills |
|---|---|---|---|---|---|---|
| Windsurf | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Cursor | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| VS Code | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Claude Desktop | ✓ | ✗ | — | — | ✓ | ✗ |
| Claude Code | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Gemini CLI | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| OpenClaw | ✗ | ✓ | ✗ | ✓ | ✗ | ✓ |
| Amp | ✗ | ✓ | ✗ | ✓ | ✗ | ✓ |
| Kiro | ✓ | ✗ | ✓ | ✗ | ✓ | ✗ |
| OpenCode | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Antigravity | ✓ | ✗ | ✓ | ✗ | ✓ | ✗ |
| Codex | ✗ | ✓ | ✗ | ✓ | — | — |
| Amazon Q | ✓ | ✗ | ✓ | ✗ | ✓ (WSL) | ✗ |
Scanner Capabilities
Agent Scan is a security scanning tool to both scan and inspect the supply chain of agent components on your machine. It scans for common security vulnerabilities like prompt injections, tool poisoning, toxic flows, or vulnerabilities in agent skills.
Agent Scan operates in two main modes which can be used jointly or separately:
- Scan Mode: The CLI command
snyk-agent-scanscans the current machine for agents and agent components such as skills and MCP servers. Upon completion, it will output a comprehensive report for the user to review.
- Background Mode (MDM, Crowdstrike). Agent Scan scans the machine in regular intervals in the background, and reports the results to a Snyk Evo instance. This can be used by security teams to monitor the company-wide agent supply chain in a central location. To set this up, please contact us.
CI mode (requires --dangerously-run-mcp-servers in non-interactive environments)
snyk-agent-scan --ci --dangerously-run-mcp-servers ```
Development Setup
To run Agent Scan from source, follow these steps:
uv run pip install -e .
uv run -m src.agent_scan.cliQuick Start
To get started:
1. Sign up at Snyk and get an API token from https://app.snyk.io/account (API Token → KEY → click to show). 2. Set the token as an environment variable before running any scan:
export SNYK_TOKEN=your-api-token-here
Examples
```bash
Demo
This repository includes a vulnerable MCP server that can demonstrate Model Context Protocol security issues that Agent Scan finds.
How to demo MCP security issues?
- Clone this repository
- Create an
mcp.jsonconfig file in the cloned git repository root directory with the following contents:
{
"mcpServers": {
"Demo MCP Server": {
"type": "stdio",
"command": "uv",
"args": ["run", "mcp", "run", "demoserver/server.py"],
},
},
}- Run Agent Scan:
uvx --python 3.13 snyk-agent-scan@latest scan --full-toxic-flows mcp.json
Note: if you place the mcp.json configuration filepath elsewhere then adjust the args path inside the MCP server configuration to reflect the path to the MCP Server (demoserver/server.py) as well as the uvx command that runs Agent Scan with the correct filepath to mcp.json.
scan a specific mcp configuration
uvx snyk-agent-scan@latest ~/.vscode/mcp.json
Common Options
These options are available for all commands:
--storage-file FILE Path to store scan results and scanner state (default: ~/.mcp-scan)
--base-url URL Base URL for the verification server
--verbose Enable detailed logging output
--print-errors Show error details and tracebacks
--json Output results in JSON format instead of rich text
--no-bootstrap Disable the startup bootstrap call to the control serverScan all known MCP configs and agent skills
snyk-agent-scan
Scan a specific config file
snyk-agent-scan ~/custom/config.json
Skip consent prompts and run all servers (ONLY for CI/CD or fully trusted environments)
snyk-agent-scan --dangerously-run-mcp-servers
CLI Parameters
Agent Scan provides the following commands:
snyk-agent-scan - Security scanner for agents, MCP servers, and skills- 通过标准 MCP 协议与 Claude、Cursor 等主流 AI 客户端深度集成
- 提供结构化工具调用接口，显著降低 AI 集成复杂度
- 支持 Claude Desktop 和 Claude Code 无缝接入，开箱即用
- 可与其他 MCP 工具组合叠加，构建完整 AI 工作站
- 轻量无侵入设计，不影响现有系统架构
- 在 Claude Desktop 对话中直接调用本地工具，实现 AI 与系统的深度联动
- 通过自然语言驱动复杂的多步骤自动化任务，代替繁琐手动操作
- 将多个 MCP 工具组合使用，构建个人专属 AI 工作站
- +Apache-2.0 协议，可免费商用
- +标准化 MCP 协议，生态互联性强
- +与 Claude 官方生态无缝对接
- +即插即用，配置简单快捷
- −依赖 Claude 客户端，非 Claude 用户无法使用
- −MCP 协议仍在持续演进，接口可能变更
- −需要一定的配置步骤
AI Skill Hub 为第三方内容聚合平台，本页面信息基于公开数据整理，不对工具功能和质量作任何法律背书。
建议在沙箱或测试环境中充分验证后，再部署至生产环境，并做好必要的安全评估。
✅ Apache 2.0 — 宽松开源协议，可商用，需保留版权声明和 NOTICE 文件，含专利授权条款。
总体来看，agent-scan 是一款质量优秀的MCP工具，在同类工具中具备一定竞争力。AI Skill Hub 将持续追踪其更新动态，建议收藏备用，结合自身场景选择合适时机引入使用。
| 原始名称 | agent-scan |
| 原始描述 | 开源MCP工具：Security scanner for AI agents, MCP servers and agent skills.。⭐2.5k · Python |
| Topics | agentaimcpmodelcontextprotocolsecuritypython |
| GitHub | https://github.com/snyk/agent-scan |
| License | Apache-2.0 |
| 语言 | Python |
收录时间：2026-05-22 · 更新时间：2026-05-22 · License：Apache-2.0 · AI Skill Hub 不对第三方内容的准确性作法律背书。