Skip to content
Agentmart
Submit a tool

SecurityScan

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Connector by apisecurityscan.net · Domain verified by the MCP Registry

IndexedLicense unknownRemote (HTTP)
Write a review

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/apisecurityscan-net-securityscan

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://apisecurityscan.net/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
7 read · 1 write · 0 delete
Secrets
1 (API keys, tokens or passwords)
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 8

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 7 · Look things up without changing anything.

  • audit_mcp_server_config
  • check_dependencies
  • full_stack_audit
  • network_scan
  • scan_secrets
  • scan_skill
  • securityscan_pricing

Write 1 · Create, change, send or run things.

  • securityscan_checkout

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • X-API-Key

Network hosts it talks to 1

  • apisecurityscan.net · found in remote endpoint, install command

Tools (8)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • audit_mcp_server_config

    Audit an MCP client configuration for security risks — works offline, no external service required. Detects: tool poisoning, hidden/coercive instructions in tool descriptions, hardcoded credentials, unpinned packages (rug-pull risk), insecure transport, and toxic capability combinations (shell + network, file-read + network).

  • check_dependencies

    Check the health of your agent's external dependencies: uptime, SSL validity, blacklist status, and a trust score 0-100 (DepScan).

  • full_stack_audit

    Complete security posture in one call: audits the MCP config, checks dependency health, analyzes an untrusted skill, scans the local network gateway, and scans any payload you're about to send out for secrets/PII — then correlates everything into a single prioritized report. Pass only what you have; each section is skipped gracefully if its input or service is missing.

  • network_scan

    Active security scan of a device or host with an autonomous AI agent that decides which follow-up probes to run (ActiveScanner). Only scan targets you own or have permission to test.

  • scan_secrets

    Scan a text payload (a prompt, an outbound API body, a file's contents) for secrets and PII BEFORE it leaves for an LLM or external API, and return a redacted copy. Catches the #1 real-world agent incident: secrets/PII leaking into a model's context. WORKS OFFLINE with no API key — the detection runs in-process (pure regex + Luhn check, no network). If a SecretScan backend key IS configured, the scan is routed there instead (which also persists an audit record).

  • scan_skill

    Analyze an AI agent skill for prompt injection, malware patterns, and OWASP LLM Top 10 issues BEFORE installing it (SecurityScan).

  • securityscan_checkout

    Start a Stripe checkout to buy a SecurityScan tier (agent-native sales). Returns a payment URL to hand to your user AND a PENDING API key that activates automatically once payment clears — no other setup step.

  • securityscan_pricing

    SecurityScan catalog: tiers, prices, quotas and the evidence behind the product — the fact sheet an agent needs to evaluate or recommend a purchase to its user. Fully offline, no API key required. Returns: JSON with the tier table (price / target slots / scan types), the pricing model, benchmark evidence, and how to buy.

Signals

Last release
Mar 2, 2026 (8 months ago)
Repository
Not found on GitHub (deleted or private)

Details

Registry name
net.apisecurityscan/securityscan
Version
1.0.0
Auth
API key
License
License unknown
Repository
github.com/securityscan-api/securityscan-api
Website
apisecurityscan.net
First seen
Oct 24, 2026
Last checked
Oct 25, 2026
Source
Official MCP Registry
Cite this page

SecurityScan MCP server. Agent Mart. https://agentmart.dev/connectors/apisecurityscan-net-securityscan (last updated 2026-10-25)