SkillAudit
Security scanner for AI agent skills and MCP servers. Detects credential theft, data exfiltration, prompt injection, obfuscated code, and 80+ threat patterns. Free API + CLI (npx skillaudit). Premium deep scans via x402 micropayments.
How to connect
Same URL, five paste targets. Ready surface · Auth required. Not a safe-to-install badge. Handshake this URL
Paste into Settings → MCP or .cursor/mcp.json.
{
"mcpServers": {
"megamind-0x-skillaudit": {
"url": "https://skillaudit--megamind-0x.run.tools"
}
}
}
Paste into .vscode/mcp.json.
{
"mcpServers": {
"megamind-0x-skillaudit": {
"url": "https://skillaudit--megamind-0x.run.tools"
}
}
}
Settings → Connectors → Add → Custom → Web. Paste the URL. Enable in a new chat.
Claude → Settings → Connectors → Add → Custom → Web
Name: SkillAudit
URL: https://skillaudit--megamind-0x.run.tools
OAuth only if this server requires it.
Save, start a new chat, enable the connector.
Developer mode custom connector. ChatGPT cannot reach localhost.
Settings → Apps & Connectors → Advanced → Developer mode ON
Create custom connector
Name: SkillAudit
MCP server URL: https://skillaudit--megamind-0x.run.tools
Auth: none unless the server requires OAuth
New chat → + → Developer mode → enable the connector
Register the HTTPS URL, then claude mcp list.
claude mcp add --transport http megamind-0x-skillaudit \
https://skillaudit--megamind-0x.run.tools
Pass on session/new as mcpServers when the agent advertised HTTP MCP.
[
{
"type": "http",
"name": "megamind-0x-skillaudit",
"url": "https://skillaudit--megamind-0x.run.tools"
}
]
Paste into a README or docs site. The widget loads snippets from Influzer — still not a SAFE badge.
Same handshake clock as this listing (overlay / warm / seed; live tools/list only if that is missing). Indigo is live_ok, amber is auth_required, gray is unreachable. Not a SAFE badge. Stdio listings have no badge.
[](https://www.influzer.ai/mcp/probe?url=https%3A%2F%2Fskillaudit--megamind-0x.run.tools)
<div data-influzer-install="megamind-0x-skillaudit"></div>
<script async src="https://www.influzer.ai/embed/install.js"></script>
https://www.influzer.ai/embed/mcp/megamind-0x-skillaudit.md
JSON: https://www.influzer.ai/api/v1/install/megamind-0x-skillaudit
Recipes using this server
No published recipes yet for this server.
Listing quality
Observable facts from our catalog and daily probe — not a safe-to-install badge.
- Surface
- Ready surface
- Auth gate
- Auth gate
- Tools source
- tools/list (live)
Observable catalog + probe facts — not a safe-to-install badge. How we verify.
Verification summary
Stored signals only. Not a safety score.
- Verification grade
- B (75)
- Last verified
- Status
- Auth required
- Response time
- 0 ms
- Auth
- Auth gate
- Transport
- http, HTTPS
- Tools indexed
- 4
- 30-day uptime
- 100% of 7 samples over 7 days
Probe history
- · auth_required · 0 ms
- · auth_required · 0 ms
- · auth_required · 0 ms
- · auth_required · 0 ms
- · auth_required · 0 ms
Tools
(4)-
scan_urlScan a skill/MCP server by URL for security issues. Returns risk level, findings, and verdict.
-
scan_githubScan a GitHub repository for skill files and security issues.
-
gate_checkPre-install gate check. Returns allow/warn/deny decision for a skill URL.
-
reputation_checkCheck the reputation of a domain based on aggregated scan history.
Tool source: tools/list (live) · last probed 2026-11-05