SkillFoxx

Snyk Agent Scan CLI

A Snyk CLI that discovers installed MCP servers, skills and agents on your machine and checks them for prompt injections and malicious payloads

  • 3,235 ★ on the repository
  • Last commit
  • Apache-2.0
CLIEditors’ pick

Extended access

Why this level

  • Reads agent configs and files on the machine and sends results to the Snyk cloud using a token
  • When scanning MCP configurations it runs the commands defined in them, asking for consent by default
All reasons and checks

snyk/agent-scanAuthor:Snyk

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add cli/snyk-agent-scan

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Extended accessThe tool runs code or makes network calls and only reads external data.

  • Reads agent configs and files on the machine and sends results to the Snyk cloud using a token
  • When scanning MCP configurations it runs the commands defined in them, asking for consent by default

This is third-party code. Review the repository files before installing.

What it does

Agent Scan discovers the agent components installed on your machine, MCP server configs, tools and skills, and checks them for common threats. It looks for prompt injections, tool poisoning and shadowing, toxic flows, malicious code, suspicious download URLs, insecure credential handling and hardcoded secrets. Auto-discovery covers Claude Code and Desktop, Cursor, VS Code, GitHub Copilot, Gemini CLI, Windsurf, Codex and other agents on macOS, Linux and Windows. It runs via uvx or as a signed standalone binary, prints results to the terminal and sends them to your Snyk account. Skill analysis can be turned off with --no-skills.

Who it is for. For security engineers, devops and developers who vet their MCP servers and skills before using them.

Good fit when

  • Before connecting a new MCP server or skill from an untrusted source
  • You need to audit all agent components on a work machine
  • You need to add MCP and skill checks to CI or a regular security process

Not a fit when

  • You have no Snyk account and SNYK_TOKEN; scans do not run without them
  • You need a stable output contract: the CLI output is marked experimental

Example request

Scan my Claude Code MCP servers and skills for prompt injections and insecure credential handling

Limitations

You need a Snyk account and a token in SNYK_TOKEN, and results are sent to the Snyk cloud. When scanning MCP configurations the tool executes the commands defined in them to fetch tool descriptions, so scans are best run in a sandbox; by default each stdio server requires explicit consent. The maintainers call the CLI output experimental and may change it between releases. No npm package is published; install via uvx or the binary. Licensed under Apache-2.0.

How to disable. It is a one-off CLI with nothing to install into the system. When run via uvx the cache is cleared with uv's own tools; simply delete the standalone binary.

FAQ

Is this an official Snyk tool?

Yes, the repository and the snyk-agent-scan package are published by Snyk itself under Apache-2.0.

Does the scanner really run commands from my configs?

Yes, when parsing an MCP configuration it starts the stdio servers to fetch tool descriptions. By default each run needs consent, and scans are best done in a sandbox.

Discussion

No questions or reviews yet.

CLI tools
Official

The Snyk CLI for finding vulnerabilities in code, dependencies, containers and IaC, with a built-in MCP server and agent mode

CLIExtended access5.7K
Editors’ pick

Security scanner for agent skills and MCP servers: finds prompt injection, data exfiltration and supply chain risks before install

CLIExtended access25.5K

Security scanner for coding agents: checks code, MCP servers, prompts and model-invented packages, and gives an A to F grade.

MCP serverExtended access123

A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install

CLIExtended access2.7K

A security scanner for MCP servers and agent skills that looks for prompt injection, secret leaks and swaps after approval.

CLIExtended access99

A static scanner for vulnerabilities in AI agent code and MCP configs with 66 rules mapped to OWASP Agentic Top 10

CLIExtended access245

README in short

The README describes Agent Scan as a security scanner for agent components: MCP servers, tools and skills. The tool auto-discovers configs of popular agents on macOS, Linux and Windows and looks for prompt injections, tool poisoning, toxic flows, malicious code, insecure credential handling and other risks. It runs via uvx or a signed standalone binary shipped with an SBOM, checksums and a GPG verification guide. It needs a SNYK_TOKEN, and results go to Snyk. The output format is marked experimental and no npm package is published.

README badge

Report a problem