Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.
Security scanner for Claude Code skills, plugins, and MCP servers. A verdict before you install.
Skills and plugins are code plus instructions that you hand to an agent holding your shell, your files, and your credentials. People install them from marketplace links and pasted GitHub URLs on vibes. That is a supply chain, and it has all the classic attack shapes: hooks that fire automatically on session start, install scripts piped from the network, credential reads paired with outbound calls, and prompt injection hiding in the instruction text itself.
skanna reads the whole package (SKILL.md files, scripts, hooks, manifests) and returns SAFE / CAUTION / DANGEROUS with file:line findings and a go / no-go recommendation. It never executes anything from the target.
Or manually: copy skills/skanna/ into ~/.claude/skills/ and restart Claude Code.
No API key, no dependencies, no per-scan cost. The scanner is the model you are already running, pointed at the right things with the right suspicions.
One rule file per danger family, in skills/skanna/references/rules/:
Rule family Looks for ------ autorun-hooks SessionStart / PreToolUse / Stop hooks that run code before you ever review it piped-network-install curl \ bash, iwr \ iex, postinstall scripts fetching remote code credential-access reads of .env, SSH keys, keychains, browser cookies, token-paste prompts exfiltration outbound calls carrying file contents, env vars, or conversation text obfuscation base64 + eval, minified blobs, instructions you cannot read prompt-injection instruction text that hijacks the agent against
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/proluct--skanna.html)
Audit and revoke everything Claude Code has been given on Linux: trusted folders, "always allow" rules, saved transcripts, hooks, MCP servers. Quarantine instead of delete, one command to undo. Single
duty1g/x64dbg-mcp-serverx64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg progra
sv-number/mcp-serverMCP server for AI agents that need a phone number: order a private number in 200+ countries, read the SMS verification code, hand it back. The widest country coverage in the category, and you can chec
Stupidoodle/swissdevjobs-cliSearch & apply to ~4,700 salary-transparent tech jobs across 7 countries (🇨🇭🇩🇪🇬🇧🇺🇸🇨🇦🇳🇱🇫🇷) from your terminal or AI agent — zero-dependency Python CLI + MCP server + Claude Code plugin
mcpdelta/mcpdeltaDelta MCP is a free app that sits between your AI apps and their MCP servers: one program per task instead of one tool call per step, up to 24.1× fewer tokens in our benchmarks. Every change is record
Cripacx/mediagenAI image and video generation skill for Claude Code and other coding agents — Gemini, OpenAI and Kie AI behind one CLI and MCP server, with EU AI Act content marking.
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.