Send a request

Snyk Agent Scan (formerly Invariant MCP-Scan)

by Snyk (ex-Invariant Labs team)

Scan installed MCP servers and skills for traps

Scans installed MCP servers and agent skills for tool poisoning, hidden instructions and malware; includes a web inspector.

Open SourceTrust 100Some practice neededTerminal · Python · Browser
Download

Checked sourceWhat does “checked” mean?github.com/snyk/agent-scanLicence: Apache-2.0checked 14 hours agoVersion v0.6.10 · 30 Oct 2026SHA-256 checksum for 8 of 8 files on the release page.

Have it set up for you instead:Request setup by OROBOOr start with the AI Compass: a written assessment at a fixed price of €490 (businesses only).

How it runs for you

Simulation starting …

Illustration, not a real test run

What you get

What you get

  1. 01Finds tool poisoning and hidden instructions
  2. 02Checks skills for malware and hardcoded secrets
  3. 03Includes a web inspector for single skills

For you if …

  • Developers using Claude Code, Cursor or Codex
  • Skill marketplace operators

Pick something else if …

  • As a replacement for reviewing the code yourself

How to start

In three steps.

What you need
  • Python with uv or pip
  • Local agent configuration
  1. 1Install as the README says (formerly mcp-scan)
  2. 2Run a scan across your local agent configs
  3. 3Or test one skill in the Snyk Labs web inspector

Part of these packages

Snyk Agent Scan (formerly Invariant MCP-Scan) works together with other software.

Use AI safely

Your team uses AI — with far less risk of data leaks or hijacked chatbots.

5 stepsone day for the basicsMedium

Safety check

7 of 7 checks passed

No known malicious patterns in the install instructionsactively maintainedLicence: Apache-2.0

What does “checked” mean?

Trust 100
Who is behind it?
  • Taken by OROBO from the official source. The maker has not joined OROBO yet.
Is the code clean?
  • Source code publicly visible
  • Licence: Apache-2.0
  • No known malicious patterns in the install instructions
Is it maintained?
  • Website reachable
  • Updated today
Technical details & what we don’t check
  • Website loads fast
  • Website protection settings: 5 of 6 (website only, not the software)HSTS, CSP, nosniff, Referrer-Policy, Permissions-Policy

Claims about protection come from the maker. The trust score checks public signals, not effectiveness.

We automatically check origin, code patterns, licence, maintenance and reachability — again every day. We do not check whether the software fits your purpose, how it handles your data, or whether it works without errors. Last checked 14 hours ago. How OROBO checks

Alternatives for the same goal

Cisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersDocker MCP GatewayMake it safe · DockerRun MCP servers sealed off in containersOpen SourceTrust high, 100For developersCisco MCP ScannerMake it safe · Cisco AI DefenseInspect MCP servers before you plug them inOpen SourceTrust high, 100For developerspromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersAktoMake it safe · AktoFind and test MCP servers and APIs in your companyOpen SourceTrust high, 97For developersgarakMake it safe · NVIDIAHave your language model attacked on purposeOpen SourceTrust high, 100For developersGuardrails AIMake it safe · Guardrails AI (Harvey)Check AI answers before they move onOpen SourceTrust high, 100For developersNeMo GuardrailsMake it safe · NVIDIAFirm guardrails for your chatbotOpen SourceTrust high, 100For developers

Goes well with

OllamaBuild it yourself · OllamaRun language models locally with one commandOpen SourceTrust high, 97Runs offlinepromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersLakera GuardMake it safe · Lakera (Check Point Software)Catch prompt attacks before your AI respondsFree versionTrust high, 100For businessesCisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersReality DefenderMake it safe · Reality Defender Inc.Detect deepfakes in voice, images and videoFree versionTrust high, 100Beginner-friendly

Facts

AreaMake it safe
PriceOpen Source
LicenceApache-2.0
Runs onTerminal, Python, Browser
Versionv0.6.10 ↗ · 30 Oct 2026
Popular with developers★ 3,203 GitHub
Last updated04 Nov 2026
Sourcesnyk/agent-scan ↗
Websitelabs.snyk.io/experiments/skill-scan ↗
I am the maker