Skip to content
Agentmart
Submit a tool

Skillguard

Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts).

Connector by RudrenduPaul · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 2
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/rudrendupaul-skillguard

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Security scanner for third-party AI agent-skill files (SKILL.md, hooks, scripts) via MCP.

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
1 read · 1 write · 0 delete
Secrets
None asked for
Install scripts
Not scanned yet
Runs as
Python package

Tools by what they do 2

Read from the source code; the running server may list different tools.

Read 1 · Look things up without changing anything.

  • scan_skill

Write 1 · Create, change, send or run things.

  • run

Files it touches

  • Any path the agent passes to its tools

Tools (2)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • run

    Description is built at runtime.

  • scan_skillScan a third-party agent skill for known attack patterns

    Scans a third-party AI agent-skill directory (a SKILL.md manifest plus its hooks/scripts) for known attack patterns before it is installed or run: remote-code-execution hooks, declared-scope-vs-actual-behavior mismatches, file-scope escalation, supply-chain-risky install hooks, obfuscated payloads, and credential harvesting. Call this before installing or executing any agent skill that was not authored by you or your organization -- the same way you would not run an unreviewed shell script from a stranger. Returns a structured scan result (findings, severities, exit code) as JSON; a non-zero e…

Signals

Stars
2
Forks
0
Open issues
0
Weekly downloads
27
Last commit
Sep 25, 2026 (1 month ago)
Last release
Sep 25, 2026 (1 month ago)
Last package publish
Aug 11, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.RudrenduPaul/skillguard
Version
0.2.5
Auth
No auth
Packages
pypi skillguard-cli
License
Apache-2.0
First seen
Oct 24, 2026
Last checked
Oct 24, 2026

More from RudrenduPaul

Cite this page

Skillguard MCP server. Agent Mart. https://agentmart.dev/connectors/rudrendupaul-skillguard (last updated 2026-10-24)