Snyk Agent Scan: Security Scanner for AI Agents, MCP Servers, and Skills

Repositorysnyk/agent-scanTool

Agent Scan is an open-source security tool from Snyk that discovers and scans local AI agent components, MCP servers, and skills for prompt injections and vulnerabilities.

Key points

  1. Discovers locally installed agent components including harnesses, Model Context Protocol (MCP) servers, and skills.
  2. Scans components for threats such as prompt injections, sensitive data exposure, and malware payloads hidden in natural language.
  3. Available via uvx or as a standalone binary; no npm package is published.
  4. Version 0.6 and later introduces scored risk indicators, deprecating the older v0.5.x issue-code format.
  5. Integrates with the Snyk Evo platform for enterprise-scale risk management and monitoring.

Why it matters

As developers adopt MCP servers and agent skills, local systems face new threats from prompt injections and text-based payloads. Agent Scan provides automated discovery and vulnerability assessment tailored specifically to agent architectures.

Analysis

Agent Scan addresses emerging risks in the expanding agent and MCP ecosystem. Developed in Python, it allows lightweight execution without complex installation setups. With versions currently at v0.5.x and v0.6, the CLI output remains experimental and subject to change, though Snyk maintains enterprise-grade stability via integration with its Evo platform.

Mentioned links

Found in

Summary generated by AI (Gemini 3.8 Flash, 28 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • Repository:affaan-m/agentshield

    AgentShield: Security Auditor for Claude Code and MCP Configurations

    AgentShield is an open-source TypeScript security scanner designed for AI agent setups. It inspects `.claude/` directories to detect hardcoded secrets, unverified MCP servers, hook injection vulnerabilities, and tool permission misconfigurations.

    1.2kstarsTypeScript

    AI & LLMs· Tool

  • Repository:NVIDIA/SkillSpector

    SkillSpector: Security Scanner for AI Agent Skills by NVIDIA

    SkillSpector is an open-source security scanner from NVIDIA designed to inspect extensions and skills for AI agents (such as Claude Code, Codex CLI, and MCP) for vulnerabilities and malicious patterns before installation.

    15.9kstarsPython

    AI & LLMs· Tool

  • Repository:bex-co/bex-security

    Bex Security: Agent-Agnostic AI Security Scanner

    Bex Security is an open-source, upstream-first fork of OpenAI Codex Security that brings vulnerability detection, validation, and remediation to multiple coding agents via the Agent Client Protocol (ACP).

    51starsTypeScript

    AI & LLMs· Tool

  • Link:Snyk

    Snyk Launches AI Security Engineer Foundations & Certification

    Snyk has introduced a six-module training curriculum titled AI Security Engineer Foundations. Delivered online and in person, the half-hour sessions address security across agentic workflows, MCP architectures, and AI-assisted development.

    AI & LLMs· Resource

  • Repository:nealbridges/VulnHunter

    VulnHunter: Agentic AI Security Scanner for Exploitable Vulnerabilities

    VulnHunter is an open-source, agentic AI security scanner that inspects source code from an attacker's perspective, confirms exploitability, and generates fixes. This maintained fork of Capital One's original project decouples the tool from Claude Code to support arbitrary agent harnesses and open-weight models.

    223starsPython

    AI & LLMs· Tool

  • Link:SkillPatch

    SkillPatch: Directory for Security-Verified AI Agent Skills

    SkillPatch is a public registry for AI agent skills based on the open SKILL.md standard. The platform provides automated security assessments prior to publication and supports tools such as Claude Code, Cursor, and GitHub Copilot.

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.